{"report_id":"978ae03c-8e7f-476e-ab27-d72563af474c","version":6,"status":"done","tags":["bet365","gambling","phishing"],"date":"2026-03-05T10:58:42Z","url":{"schema":"https","addr":"manbetxss.com","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"title":"万博体育|五大联赛官方合作伙伴","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"manbetxss.com","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T10:58:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]},"summary":[{"fqdn":"otdho.z5bu9ne7.com","ip":{"addr":"3.33.255.186","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2026-03-04T14:45:11.203497Z","last_seen":"2026-03-04T14:45:11.203498Z","alert_count":0,"request_count":3,"received_data":19456,"sent_data":1632,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"2o9o7qal.3j1ai0ll.com","ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2026-02-07T04:48:41.499672Z","last_seen":"2026-03-03T22:05:33.252446Z","alert_count":0,"request_count":9,"received_data":1807216,"sent_data":4240,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"gv8yqx.pham.xin","ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2022-10-09","domain_rank":0,"first_seen":"2026-02-07T20:55:58.541605Z","last_seen":"2026-03-01T19:21:54.559158Z","alert_count":12,"request_count":135,"received_data":12602634,"sent_data":67168,"comment":"","tags":null,"fingerprints":null},{"fqdn":"manbetxss.com","ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":26,"received_data":1311109,"sent_data":14444,"comment":"","tags":null,"fingerprints":[{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/bundle.7126c698.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03585f467dd1043465e62024d84e8501","sha1":"1e5cf8a55c64abec323fd2af7e5823a22b4c18f0","sha256":"4cbd5c79ff097907e8a54d23154bef1b9b8db97a75ec78fb7f7fbc994e723353","sha512":"3c0bfd9bea584f9bc4acdac9815c499327a54479686c2b5e8189517433d9913de43dea480a34577ca551a0327e4d2cfd2271d6c598d4994b99119261805e46a4","ssdeep":"12288:nAQt366fCmXM7t36yfCNXYpnjhftWhS4V:ACfCZbfCSntwjV","tlshash":"68d41898f081b42856736161b2af360a7236a916ba4d4468f536c1f4bdf60cbd323fdd","size":623006,"data":"","first_seen":"2025-12-19T03:52:38.036277Z","last_seen":"2026-03-19T23:48:50.648715Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"37f0336a6fe3f56c661b149ecf659efe","sha1":"9aff4163d5da3b8d760f0593c583dd8d1f6dfc14","sha256":"f33f7afadc5c318efdd57d35da2dc2aebe39fd166a61905ce37b9f7363f51c2f","sha512":"d24a42f5f1834957e5616b5f61d52db98c3351e5ab3346f1fee8e7ca6ba62dc7c51f4ae645a8dd403194e2df3f8d2ea2c3b34d371a67dde201979552033cbace","ssdeep":"","tlshash":"279004510f71113ddc305157055c13747050c13ddc1ffcd43413d57c04741300011401","size":48,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.575592Z","times_seen":16886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/layer.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb96339625e9d456e32f86cdb3c7a7a1","sha1":"1301165c58bbb13c542cba493b7ab5774e87e31f","sha256":"17fb047ba6828fcbdf2ca226fa4594cfded2b2fdfeaff89a5bd81c7cf0359919","sha512":"53083bf4d6d450b1e9402c3f3dc40fb3434a27d47fbabee51f4ce1d3577f2a0aabe90cf5f6dfc22830a3878ec7552a6bf6bff605c82a4f832c79f34f7657ccef","ssdeep":"384:r1dCih92A3DgrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:r1YiV3D+WtXItqF13k8","tlshash":"6aa2b76a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":21994,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.489421Z","times_seen":17440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/jquery/jquery.nicescroll.min.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5bc8cd626b389bde727a91e6ce79436","sha1":"3df6c39300ac286cf596b3bda273cb39ff825429","sha256":"a1eb48eeb3b3f2ba41940d3041464f0b386b7a7c4a8acb42f3017e691f4b116e","sha512":"2c1dde58ce83d9b716919dfc42602aef3022be012b3f92e61b17b674303ecbf0b9d308064b6d6c2443cf3e3dfd36bfb332eab62e64b56bef0be801e6f4610f12","ssdeep":"768:CwJl9VwAdGuMbJVAOi9ee9RjOEe1sdMv5rjITry:Cxb7AdRjOEKhHay","tlshash":"9553a7cd7522346b05de5235d18b4b4a623a9857730b90e4762c8cf46d29bbaf223f7c","size":64651,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T19:03:26.499705Z","times_seen":17628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a030c6889648d25b98c8383a6ca3aa8c","sha1":"a48da2f93e96ef27dd33f475222bb6588a548ead","sha256":"ff3495e709104727bc98224c361510aa434701b2028c4fe17cc91dcaa5bc2004","sha512":"5e2fe4635bc98681088d6d88a4e233639a083689e6162fb81a32fa7c4641f359bca88dd8ffa0a73bcc7dc5069d696db0976dca69250c3fe9f1b923d54ca28d51","ssdeep":"","tlshash":"09518070689bb1e34314817969be3a140e5d0f47781960d5b2bf12c8abf4e8e1973e9c","size":2555,"data":"","first_seen":"2024-06-30T10:30:18Z","last_seen":"2026-06-06T23:54:10.549775Z","times_seen":619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2dfe7db95be9792922530c88ef88da4","sha1":"fc992fc77fdfa4abe3570569fbdc53a1c5714c0c","sha256":"d05ab645a69476e9a8ba932b58907e3d8f103bf23aedafbe3e76b27f4a22358a","sha512":"99065782830b3e3f013910fd9aa795fd6b341e7892eaec200ad05305920552798f2446dad45dd254de8185095f36af246cee24052b58f05eb17dee20d59b5abe","ssdeep":"","tlshash":"7f210e524f048a9b77cdc7195060241c6ccca06fbc94b988f6ce9ba70f5ea9e56fd083","size":1279,"data":"","first_seen":"2025-10-03T11:28:12.468736Z","last_seen":"2026-03-15T12:05:04.391268Z","times_seen":1669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"19d4c4431613aaac920592665ff60414","sha1":"2ddb066c3b24756ffedfd3b4fd102c2b0153375f","sha256":"bffd3d88f9ac7aaf4b8609b842fb77a3090a894529f6cd7ae5c273f9d94430fc","sha512":"8154db7373364a4657bc258e5a3e9bd707d3161a37436c16bedd699b237c2bba17ea7ffe7ffa7b254a007fff31057d766060d8538f094062f0bb1f6b83d2c384","ssdeep":"","tlshash":"8301d3315c3940907d502354137f7b0cb562463b5d81e244721e5b61bfd69bf418a7de","size":703,"data":"","first_seen":"2026-03-03T22:05:42.42888Z","last_seen":"2026-05-01T19:32:21.727712Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2dfe7db95be9792922530c88ef88da4","sha1":"fc992fc77fdfa4abe3570569fbdc53a1c5714c0c","sha256":"d05ab645a69476e9a8ba932b58907e3d8f103bf23aedafbe3e76b27f4a22358a","sha512":"99065782830b3e3f013910fd9aa795fd6b341e7892eaec200ad05305920552798f2446dad45dd254de8185095f36af246cee24052b58f05eb17dee20d59b5abe","ssdeep":"","tlshash":"7f210e524f048a9b77cdc7195060241c6ccca06fbc94b988f6ce9ba70f5ea9e56fd083","size":1279,"data":"","first_seen":"2025-10-03T11:28:12.468736Z","last_seen":"2026-03-15T12:05:04.391268Z","times_seen":1669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"740ed74ce9f70dde0830f8b04b0ad02b","sha1":"1c0a50eb8977341d69bdc283529893f3e420b3c4","sha256":"0d74421bb6fd247b924b3f073bb836f504ce61a4d604ff6a45a083c9cb09df3e","sha512":"2820bd78462db60ba76df704332022d1fed89a809084168d46bd6f1b626071647ea4b801d5fe7e5e3b2834b80e4e42681d41e12e4d4a1a17f233552b781ddf86","ssdeep":"384:2F05MtGUz1xrZXMtgImidVWAxNJyF6YgC6HEoAcZdHRl3PEkdn69oz1R0f6Iem:2KytGUt8PDQQyF6C0n5LjF6e1A6Iem","tlshash":"5592739464ea003596cbe26c4a9f4c98b72c449b4bc94d0f7c8e6a74dfa4b71037b5bc","size":20739,"data":"","first_seen":"2026-03-03T22:05:42.430467Z","last_seen":"2026-03-05T11:01:01.142217Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/websocket/CometMarathon.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"466a7ed7d00986d45375c0cbffb5233c","sha1":"68845ead668e9abd29c24b491dbf97b219226c08","sha256":"7ddafae5a0a552d2d56101cdc8306403e8fb9570759d66c48b25893b409f0123","sha512":"752801557c12ee7830f1f2e55352ab9c033aff01ff79abdffaee1601c54cdfc85a2041facfc5a7e180706812be5ad08668eada116544197fd2a784bac1903ea0","ssdeep":"192:0Pf+0Sn4NyRSTTPhvygOdWuTdC3d7QPXLHOm8cSCl1Ej3m7YAPzhsoqFncJ0j:0Pf+fnwfcXSaGLj","tlshash":"9e32314b6cf75085592b32b50f9f24447239d8572605e81c7dccaae48f98b6c0b6bfb8","size":11905,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.567524Z","times_seen":17451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/message_zh_CN.js?v=1772438913332","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f122062201cd2cedac9761f4c46b2a3","sha1":"5bced4febcad095851dd9d0dc4438d8e96aa8715","sha256":"96e43037ced41b7e8dfe16f604a02f6093aa1b65e9f349ea697e486e29bcd814","sha512":"b9cfd2e598fe9a778bea162e5180ca88bf01d2c02cceaeb27304e827fd0814662733d0df3ed07e2f3d5d0c34fea3f0e25b277d75fdc1a4de20c41eb169d225c0","ssdeep":"384:vTrBmS53qEviCysRI/2aTvfyxtvgfG+S7MjRBQP1RODaP5YnRn21IRBGN9Jaqxk7:IIy92nyfB+vODR01IRBG3JpfsIU","tlshash":"38e23ba604bedffb581615d6d44700c921d96b895afc7928bed0ee1e1b863c604f3387","size":32151,"data":"","first_seen":"2026-01-15T08:15:21.591485Z","last_seen":"2026-06-07T19:32:44.971378Z","times_seen":6832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab8b1bcffc72e505e0f37f693d6a87a5","sha1":"849c792d84445ff1cc946c4458255dce152a68da","sha256":"36e8c37b1055713547aa080372b86615e1f9858d3f632cb0f949e05247f8e607","sha512":"cb717ce8dccbd48d7b8ac79f8018ff327637fce9ef4441b832a9ba7af57cfae5e476170ec2490374e8026a0b6a6a265399d4ad2801ebdb37b7a0092d8f9331a3","ssdeep":"192:1BDi+KreB5FlJ7KRn8rVavN3nryOcCxiAcJGw/d2mi7yn:TTKCBRhKRn6YEDdV","tlshash":"ec42c8a821fe392301d371394f1e6a072532599bc396ad013e5e8b884fe977c46b36c7","size":12737,"data":"","first_seen":"2024-06-28T11:39:26Z","last_seen":"2026-06-07T07:30:11.579799Z","times_seen":12672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"6681856885ee92601b7711c11d19553f","sha1":"95ab4437869df8c790cad28e0753a4c9ea362e73","sha256":"ce52fd46b2a5cfd741a2f0c39bc2d5218271b5690bdf8ec33af94f1062e98d23","sha512":"5f2a2fe1e899778e0687301ff306fd8c35b869c0675f726653be98393da31fedc388b4d3ed25d7075a0da69656458fc929bb00daf92e1381e19bb49764bea4b5","ssdeep":"192:dvbLsKRfG3Ncq2w30CowkzcDC/L04alCUM:d93d3","tlshash":"1722cb08f1bb1da540b3203c1faff082ae64564b9d89cd02bc4d59c45f09aede971f9a","size":10725,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.580464Z","times_seen":17284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d15a9b513acdcf3e9b08901384511565","sha1":"f1fe72392137895e4952f835c0330f76aacfecdf","sha256":"9fa644edfd9af9be6b244016e8f4f0eaee414732edc6ba3641e8647253359995","sha512":"9bb3e57667fd095c42db5514ac18c9b41baf50b81ded3ff810486ce394e1034751a941fefdb4e0e09bb98613b5dfc0a842d37cd9802671928e5f49380b9eda29","ssdeep":"","tlshash":"b071013cf4fa2228282b6085779b2821a5915427144dfd0cbb1ff3389fe9d25ee566c7","size":3647,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.581264Z","times_seen":17277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/idangerous.swiper.min.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f15409fb02c527ce1f66a2fd3c4aa0e9","sha1":"1e1e1bcc0f49e99e14ba34991cffe0745178d302","sha256":"1a1b5d3d6fbfc28abe37a668abd59494208c63c5f0b5d040cf4bbbd137f87c27","sha512":"66a384d6ad5fba862e778e24c43326a718328b6f860469fb5eb69c2687b0bbdc3c2dfa9049b0e3d5509214db1dbec4477f5c3654dc04446a505379a4300d4908","ssdeep":"768:oTFZ8CkWyYzh9MTvl7prcAgQW5ppZ+rPPWRqKDyBuq0t:cZiY9uTJuAgQW5LZ+rPPWRLt","tlshash":"5613f8c1b32031a741f3626e91fecb4271f54966aa05d4dcb5ed84c41ab489a03beff9","size":45187,"data":"","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-06-07T07:30:11.533498Z","times_seen":17303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/moment.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"36c8f828395a9395549bd6e7307cb7e9","sha1":"f30a4961558e2d3d4405e7d93aa28fdb63245e78","sha256":"5d5e32fa1e06a0bc9396f349d142ad248e82086543e438c890e43f41e692db33","sha512":"40c24a9011e1bbdd98bd95b341c400bdaf48fefd953fcb407368fe3c685ac09196b55e230c03ca9890c35fe9acef2c916bed52423dc1a7b532a1db9817c03a8e","ssdeep":"1536:qOL1yBkBeb9wNoHpH7tjl2Ulwjwaj2BH3fMobEKeYEoZYiMirUw0:qOCWeH70R2BkobE+cw0","tlshash":"aeb35f5a59e31023496362294fdf2011ba388123590dee487d8da3d49f9ed7c47bafec","size":117433,"data":"","first_seen":"2023-07-29T10:21:40Z","last_seen":"2026-06-07T19:03:26.50069Z","times_seen":17486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b49f9a087107409aa72c2cae98cb9a2d","sha1":"4e5437363b01587219749df464074222b1f7cc15","sha256":"ede97ea2b0af005ca672620796b35033596ef90d4124dbc5ef0437a6daccd568","sha512":"bd8a42ff12abeddc202b15787e6d8528832f0a007eb0cc91930da32eaa92edbb3538059de690ff9208e9163269164969e2b703733afafc64f6e998048f487011","ssdeep":"384:aZXMtgImidVWAxNJyF6YgC6HEoAG+GhcqJmYcIyaFIy/BIyv3IyPlpK:E8PDQQyF6C0nV+GW5IXIaIqIYpK","tlshash":"c2a2b41824fa40241ea3727857efa1c8f578801b8449ce44bc9e93582fc4b6967a7bfd","size":23170,"data":"","first_seen":"2026-03-03T22:05:42.437423Z","last_seen":"2026-03-05T11:01:01.145469Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/vendor.4f844090.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1550da77b83ea7f92fa72c28654b0b07","sha1":"bdf997b0f858feb25fe28e9aedb9ac9ab199f143","sha256":"eb4f74cbc5b25824f7f0bb24042143a6495404ce6d2316886ff2c5887e52c020","sha512":"0d4ec259e0a05aa51ad1d12030c8eb7a40bfb5dfb74c2285389d0461e1dc640ddf4b77d58628f9a1cd9a92ed9d764bd90dfb1fafb85235a2c270906ce606fc2e","ssdeep":"3072:JlPm6jZ+uUcYoazxkXfDirssXrs1zFzToZpGYPfKX9dT3ZFUxxk57AT6m/FA:mzuv+pIzMvD6UFA","tlshash":"32f31bca32957c5552aa31e2887f090ef33a1d66348cd068f6a5f5d23cb540e9277f78","size":157958,"data":"","first_seen":"2025-12-19T03:52:38.075217Z","last_seen":"2026-03-19T23:48:50.690511Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/common.032d44c1.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d90fe732a8918235001f90a280ee3fd","sha1":"7e16f5554ebea2306f378b175c18457aed09bc22","sha256":"35d46a2ae61a964d46b8d668fa0d32e3cdb9e975f848692ebc12916b32078e5b","sha512":"0600dab872d39f5e780664b3c654b854568548399779eb614e286d39cc74030f40c63703c08161e995f45aba2aa8c9413a64b7938d81cb20eebe1dd84c8a98d6","ssdeep":"1536:9QARRaYYKZIknaW+lwfZA/AHJQZ1WpbuRIRoxkpV48KbnmrbB2L:93ZIkaWAw7KbqbB+","tlshash":"b2b33afb73c5b2f44143eb64e41b6410b42e3cbe7f9587d48255cee4b9b0099898ee98","size":111648,"data":"","first_seen":"2025-12-19T03:52:38.055006Z","last_seen":"2026-03-19T23:48:50.675664Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f5bce1aa50f72fd0834901c70db4f43","sha1":"41771079bee5eb45539e694a5eff580732ab26b0","sha256":"a50724b65a2657f6e67adbf98a3dd135de52b4786350f0b1bd142adff38c7ffd","sha512":"d1445eef1431e8e11779bb3aa9da243cfc04ea0abe4cb9a62b6b0f5940a9ea17ad7d0926a51925feb06ce2afc435ce9050c3955ce973407eebfa4dd1d0ca35af","ssdeep":"192:cyzyMkzf77qsBQXbhG1SUnqpT7H8DvswVAJ4jy7j3vU4P8eaoCrHoQcasI4kHwCW:mMkjq0TqEVAJ184P4DiQzR0KmgqQ2N","tlshash":"599210b876f701b24c667477875a2144e100f0ebb648ee087d4e56dc4fa8a34b3a6fd5","size":19701,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.582699Z","times_seen":17251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"edaddb8132e9e0880252c5b6c47bf1c1","sha1":"dc08b5b6ca432b46cca94f1f297491e1b08736ea","sha256":"b98809417c0240085bf70f2a1127f0b622c1514651737e7e4ffac4b39e4da17e","sha512":"00dbcc0a7b89e5e377bc26573fa3b9f1d09267044b3ee1c594e22522f8a17733bf041ebfa09ddb2e70a9f495437933f8a4e42875a16a3221067bf1df558c090b","ssdeep":"","tlshash":"da4000000000000000000000000000000000000300000000300000000f000000000000","size":6,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.58353Z","times_seen":20356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/websocket/Comet.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"1008fe6a5e1a182d7775963b85405bb2","sha1":"e174a7b08cc3cb5545af1cd33d2814e604119392","sha256":"7479f6f22194ac37dd6d3f5a579b4682ac8dcb6389fb961cf4140f3fcc707a20","sha512":"26e07821ee1e8e94c4bada028e049df7572cac06f2e8dae958baa7a011eb201a6a1d4ed0cfa15017a3f52a0cb949343de0b33ca6da7c245f763c86d5adfb0223","ssdeep":"192:4Pf+aTbLSru4NyRs8VDv1KygOdWuTyVC3d7QPXLHOm8cSCl1Ej7bY8l7YJIJvO5N:4Pf+aTbe4M2cXzsjDUfj","tlshash":"ab721e4a2cf76086552732b90f5f64543235a8172605e91c7dcca6e08f98b7c1babff8","size":17162,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.494719Z","times_seen":17452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fe7dadf050dad2dcfd386d21b880281","sha1":"07e7feb8dc9309fe66d86d7a9e27f8efd32ab0bd","sha256":"aa891aafe8e98e1e15d81b2b116e6c3808d0bbbec56cd24818e2e7ac911877c9","sha512":"9da40e5132ece9fe346f27aa467b2496545c84197131c633e5b1ff1f641ece723440ec0289e82d7948b85bcd901b9e3eb6e36f8e0339ae05e4a32621e895accf","ssdeep":"384:yC+tJn9Dbvbf1P3QSBxDrdiewZnnoTW39if+04xSlR4nbiamdrjNfrzInGINYlor:NWJnlN3QSBxDMewZnnoTW39L0MSR4biK","tlshash":"a762954d3a9514bb4adf31b770ab204f767e8800852c91c4bdbca0d166b5ee072e7e6d","size":14857,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T19:03:26.50851Z","times_seen":17498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f1681b5a72417b33c2869aab85af152","sha1":"b40a6d9c6d058c2bd6e126a1b0191182926b9d04","sha256":"eabdfd0c5237f406e0acbef879968e72e5e3d62dd8e8b6bcee48e5ab7f4d0154","sha512":"d9190153595e85b071dbf1c92212e7c30a5de2e1d6c4533558bb5f4235d6227c327751799ce20fa50a875a4ceb25227f4eb7d133c3257d8770c1131117d8bda4","ssdeep":"","tlshash":"1631d8d2f3cd01fd42099504248620d9b11dc2394219d48efa9d3c8e73d696e232f32f","size":1761,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.584253Z","times_seen":17228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/lazyload.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d87854586672bff7f886a47da85da5ed","sha1":"8d0537030dc7a81ade87a41a75fd5a75e4e33da1","sha256":"17859187f895c27de8869fb6bfec579fd68c4588d0af71d08d334be92d144ada","sha512":"d8c3e724f00bcf1ebfe1f8e96dda01243cf22aef18a0fc5a25a42d84458ff58a22a316dabf1d80d1b4f4c28db79edbdf9ba19df755d72f2b0b9f64497137672f","ssdeep":"192:Cdr+EgBD7NiM7B1wV20jSCQrF/bcbe7/bgdCx4RTsmS3KDsS3CggvBSChKRJ0Suk:Cdr+JBDYpV20Ez+obgdsm3ROCJIqSJvG","tlshash":"304200483deb51aba1d3b0f89a5f11447235810b160eee253d6c9395af6093932f2ff9","size":12053,"data":"","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-06-07T07:30:11.549562Z","times_seen":17242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c3f7d9e5de3b764c32a679ad06ae3db","sha1":"9ab260e36b46c6ca6f58066ee914f3826d86a37f","sha256":"fefe9a763127c0f92edfe95be1000aeed2eda7690482769c90dc9488dbe5d33a","sha512":"1517bde6929159474692270e256f6021611365d30618b57d1fd325e7170bc7540bac8500e1ccd438d2a3d5f3b6cf1456ba39560d5cbc685f4b56b4c2b4126ad3","ssdeep":"","tlshash":"0e51462618e8c076a31b639d0b9f1141b53c750bc3ac8d357d0d5b758fe451452dabdd","size":2561,"data":"","first_seen":"2023-11-23T15:36:17Z","last_seen":"2026-06-07T07:30:11.584941Z","times_seen":15235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1f435d99e327604c48a3556af4af254","sha1":"403f037153a85a538d0ad0d5ebcba7d38da3160f","sha256":"c069936c7347a5e43a12aa59d2de73cfb20448df047ef530421d12e7a0f02df3","sha512":"f42c15f0be1a576d5a0175c6f53ce1c73a680e0fc252f70dddf43d19a66d824e268b5dfc67961875162b982b201b6949746c40111b92f85b9fee75ddbaacf5a5","ssdeep":"768:cLHmhEOPRtPvJdcz4nPJCKJV+3/svMIR0K33gYeLLvcOvBea/u+IaAVbaa1aTKO+:gqLqgjIIa4aTuUwlo8/Q0vwr90AIC8","tlshash":"57c3c71c74e712a664b330791baf31047072941b690dde04bd5dbac06f98a3da3b67ee","size":127242,"data":"","first_seen":"2026-03-03T22:05:42.450243Z","last_seen":"2026-03-05T11:01:01.148342Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"479c01001c455527cf2aafec087accad","sha1":"230c5d853a00977d890c25cb56b5a07c5e0acd0e","sha256":"0ad2a7081ff475ce3a2068fe69547248166c0fd39f26fbf03f2ac5db073a16cf","sha512":"ebedabe18db451b91ae6cfe4a55712d0401a1cd5545a5b9344edcbb68c7cb678a1a8a6efc20f101d99e8cc094a060bb32deccf9e694a837ee17a8f8585bd43c6","ssdeep":"","tlshash":"1f21233e1c17a1b52ef7046a9b7bd5a63af2051b2442e400bc8cd8193f14fc11c25bde","size":1389,"data":"","first_seen":"2023-08-21T11:10:45Z","last_seen":"2026-06-07T07:30:11.586469Z","times_seen":16887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/gui-base.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6ce47d880d7a50ddf91b074c8572edf","sha1":"6a3657c67209136e5b544859daecf16f2d153b72","sha256":"c49e04c7ecfd07c74b58cf161ef2b58f2bc837a9091ed1ae090a33734cdaa734","sha512":"0946a1cb9d048b485dadf4056a4aa7be685a8906240a828a5ac776a4e1eae2ed5ef238bd0724da41cce33324357ba44704d34a6766430f1552630f9a17b664f4","ssdeep":"768:+lkflKVlvREcS38xHmuqrRO/5IS3oFaJX+mQdudqD9jAXImsUh8H3yALdODRG4eK:6ClKVlvREcYoHz0PszIfoALkMEY16pB","tlshash":"4353c80a72b130a106efb1b6515f460d323a6927d44ac458b97c9ae43f74f28316bf7e","size":60909,"data":"","first_seen":"2023-08-26T00:19:56Z","last_seen":"2026-06-07T07:30:11.543891Z","times_seen":16696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/jquery/jquery.super-marquee.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f77d83590bc0a69298f2fbcc5d9911cd","sha1":"1d6aa25d7052f53ad0181385e5efe72f224bbdb9","sha256":"1d042b9441e860ddcc01b9e9e5e8d354121ee0e31b47f6e18a321e2e633d22e7","sha512":"a39dc6c01df32c8f72842af346f4d67e1278d37a74a0541537b8274b421bcfbc547a2f4844f3c4b6c5cdda4c78f0a8f41171c87ffd149ab52526a95bc6c5bf61","ssdeep":"96:nwzrUsI9/8w/ISEgOGXFRNcrc8PQjc3Pb:+rUsk88OnJQA3D","tlshash":"2991252d7290f5d559cf3c3be02b0b050c785123a54e00927a65def279ba379a607e1f","size":4433,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.53701Z","times_seen":17506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95956,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-06-07T07:30:11.536389Z","times_seen":18326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/bootstrap-dialog.min.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ce8851dc823429a42ab6147554403cc","sha1":"28f381f0e0aa4f5d56690e65723bd97fb59a38e6","sha256":"dd1edf5e54071903c4c1e81e33636444899d645df6b18bad22249da07f91c811","sha512":"f42a4d48c666d9c78fcb6c6061141452899085c504bf15e23749611dda00b6913e75ebbe47ca436a2ed016175d0918f193e474f13974a2f6a5304e18909a87ee","ssdeep":"384:3ai3F3N3VKUINthDa7Vnq86z3JCDKSz1m0hMtkJI2Cg0WEUOv5Dq:T3l3INthDu1YCDKS5flC9m1","tlshash":"6a9261ccb2d9b54c47abe072143f200df03a996951496119bc79e9ebecf060aa077f79","size":20132,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T19:03:26.492059Z","times_seen":17552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/livechat.ashx?siteId=65003016","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6040dc48164fe6801223cb0b5552952f","sha1":"603fbed8b7a5426e9bbb12e57bc88b7a4758e022","sha256":"7b7da61b69bae4b64fc1637348893c3281091db312f37d19ee350891bbd7ea7f","sha512":"004fc22ca684d867b2cf52f20ab5ae75bc226e1405e12572fab721a02d46ca54d739343907d3eb5bd4316207762f0c928e91718f2063fafa6d0944812b30896d","ssdeep":"","tlshash":"115175e6676e0110073020a99d7b738c98bd91593d4c8c97f8bc922035f1f9f9655ee9","size":2619,"data":"","first_seen":"2026-03-04T14:45:19.176963Z","last_seen":"2026-03-05T11:01:01.113173Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/jquery/jquery.mailAutoComplete-4.0.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"08e5a86e482c2cacb81fefc656248104","sha1":"80a09e4000e7a2305498ce1a99b8f52991cf2e1a","sha256":"b976748094d2676273e388bc3632321d9c8e44e191a0cb69c87779a933ee1650","sha512":"0a592cd1b909bf4aebd2cad4c4556fc4460aa6ed0aec0fc642374dafeb9924929d80e167d1f45d9e5dd93210af8de69840665963bc71e2f0b3a261b970b7a5f2","ssdeep":"96:ZaN1VI9nylyy+B6hAnlA4xmsKVwH1Dsejz:ZAzCnyl+BpFmstH1Z","tlshash":"c88122a0f35c91f7059e7213654e5acd91be40bb5c1529afbca05a0c38f8daa232dc7d","size":4142,"data":"","first_seen":"2023-05-18T23:52:16Z","last_seen":"2026-05-28T12:49:52.674633Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/Button.c473e3a2.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0152d00c2f305df463d02d2b26bb0d6","sha1":"ec985c18f069617a87b4c1f1c20e1a96b6972049","sha256":"ff2743d0c5f71a004611574b1ff6fef857173311483414ee569f9b6fc312a28c","sha512":"51ddb771b6b8046a3a7119f99ea7fa3f97fc7fe43c29314daabcc4f6e85e536232557d5087e3276eeee122de200d61cd3e9d266c77d4a1076e6a6d4dbd995fbc","ssdeep":"192:VUCi/WvmQ/y9OmrgX8In8A1gLGWNKi9N0FjcAVD2Mk0srw3:Vc/W1/y9OmkMK8fKWNwAAkL1w3","tlshash":"4722c8ccf0a521274393a354e13f284472766c1c4895a118b65a9ce17ffa17fa22ff7a","size":10371,"data":"","first_seen":"2025-12-19T03:52:37.948953Z","last_seen":"2026-03-19T23:48:50.679836Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"7932637ac9b0a1125acfaeffa837b6af","sha1":"01107a42cef642f68e70ef30502ecb6c0de6a0d6","sha256":"f938651bd7efeb3c523dcca3df1c9a0cc63b12f604816c8e49636fda5b1b1c7e","sha512":"6ee9dd22796803d3a44aaf8a59219dc077e2cf7ebe2b58efe545c7f08028496e595fbea31d2990cc0f210054f6cd91055326484acd544aa29889712c2c050f57","ssdeep":"","tlshash":"bc71315e7559bc949bd3202a4a7f1008727b486f2928c850fa5dcc50af5cf0f2362b9f","size":3486,"data":"","first_seen":"2023-10-24T11:42:08Z","last_seen":"2026-06-07T07:30:11.58824Z","times_seen":15967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","size":32679,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.487698Z","times_seen":17749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd4934ec50598a49950c57836d268ba9","sha1":"9830d9f40b0baf411ea1e7b7a4b65675cf35ae04","sha256":"89e8ae92a48e530a676704a7858edcc65fdd1488e39280ba8da4cb80dc5729d5","sha512":"1b7e75147ff199dc7900be58df3ab41039a70322ab2db2d697238b166447a915cefafb3e1cc17377a7ecfc08b641fd9ab51351f060abb405ceed36ee1e5b1b9c","ssdeep":"","tlshash":"c641df0d25ee1008d01729a9fbbbf50c632994272ca4ed08b50dd2154f6ed7ed2b9a9f","size":2036,"data":"","first_seen":"2023-11-22T16:18:01Z","last_seen":"2026-06-07T07:30:11.5897Z","times_seen":15182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95956,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-06-07T07:30:11.536389Z","times_seen":18326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3769baf5d7c48ee84235cc497bde767d","sha1":"3e211db466cbf09f2e15f4447c891b0ea0e96798","sha256":"9165b24d4f4bc967a865d1b10b6d1dc9d1671e3a9676fd05c08b48240cba42a5","sha512":"999a5f9295299c9bd3b310efc4e5f4e80d33866307ddc9d8712e3860b21060df16ee6890b6a4bab66595565a3abf6a6579b39f5e74b79c3a58d1b06d4a56aa57","ssdeep":"","tlshash":"e2f023b91486845ae3c4046ca7b35405d0f9981e80084562bc4dc7b07598f7f78374d4","size":650,"data":"","first_seen":"2026-03-03T22:05:42.459845Z","last_seen":"2026-05-01T19:32:21.740878Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3769baf5d7c48ee84235cc497bde767d","sha1":"3e211db466cbf09f2e15f4447c891b0ea0e96798","sha256":"9165b24d4f4bc967a865d1b10b6d1dc9d1671e3a9676fd05c08b48240cba42a5","sha512":"999a5f9295299c9bd3b310efc4e5f4e80d33866307ddc9d8712e3860b21060df16ee6890b6a4bab66595565a3abf6a6579b39f5e74b79c3a58d1b06d4a56aa57","ssdeep":"","tlshash":"e2f023b91486845ae3c4046ca7b35405d0f9981e80084562bc4dc7b07598f7f78374d4","size":650,"data":"","first_seen":"2026-03-03T22:05:42.459845Z","last_seen":"2026-05-01T19:32:21.740878Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/float.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"829af863b0cdc4a603919824ae046299","sha1":"1d417b1553e4ecb7125ebf2005b74255291fbf73","sha256":"1dbe4afbc9ed220c08b9e95577b56f83e2e8e0f7620c5dc18266bb325e5bb271","sha512":"e1202fa26fd353dfb2f989d3d45512e0691c062076297399f5fe62f63e7f5b194fec4a3d7fe2f09be1a6a945e197e7d68445d33dcc6f80b23a315112d9ae5b6c","ssdeep":"96:G4SXFXVXDL+R5NxuHie/moRUgIm/Kv3RKXg+Iw3qCNv5IC80b7Yr+HpH:G7xhDL+jNxzeBVLKJ1LeqCwCxb7YspH","tlshash":"04e1506e03b1212195aff1beaf1e424c6631905b2507dd057e0c87c46fa493c4636fee","size":6959,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.51234Z","times_seen":17483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1880ce6f7e86a563b54412066416edc","sha1":"379f66a5c76c995e8255b0f825f2d2ef05d3ab74","sha256":"dadb28dfc6a383dc589a4c01a6db796fab7be6c40b7f7d413a189394ecac0bf1","sha512":"c5764f5080dc814bc985f6c4b26e18684cfe09bd3bb2dadb92e45500f82f583561e31d4b722d43628a014f5bb0c4f97019f91dbf0432d38909e7468e86e2bc49","ssdeep":"","tlshash":"70312f221117907787f2fb12a27f2406c80f878a953c99ee739f9070bb014fd71aaa4d","size":1827,"data":"","first_seen":"2024-07-12T23:08:52Z","last_seen":"2026-06-07T07:30:11.591126Z","times_seen":12357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6ea297058f6d52d83390d9ea7f914aa","sha1":"349df987c3c4c50687d993b31f83cfea7f796730","sha256":"2f21ca2376a9112f70c12ecc46d75ff792b067f5edceae5ea06011c13cf14e56","sha512":"80999dd48f3db744a7cc59dc9cec9303b35216f65d2711891705dbc5dcfb34a18c5c015a2615573aaf59315882c5724ab5dc0e218e8f9cfa2579c4ef37d81cc5","ssdeep":"96:Ge2n8LmEhLzcRXKBxap3cSubfC7WjnM9LidafQa+X9MhsvVQCi:D2n8LmEhAXKfapMSu7C7w2WX988QCi","tlshash":"e0c10e4e72e120b199a7a52c929f901024725403080fdd1dbe4d93a4df89d7fb6ba3ef","size":6025,"data":"","first_seen":"2023-08-02T04:42:13Z","last_seen":"2026-06-07T07:30:11.592514Z","times_seen":17147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"cf0aad09d2e7287c48d72501c4ed8cbd","sha1":"7950b8c00d5a278b662dbccd11af31398a408e51","sha256":"72512199b29d971b5fe854b1f610604dcbdec2c38666c106f1d15863e0df32db","sha512":"2c1680bded9b22be2e6c38d76e46ef67bd438c6c9d99c804f9dcb77ca30bd5aa6f090c89a51205cc7efb466040a171eaa318ffe6fdf046c924394ce7867218f7","ssdeep":"","tlshash":"75d02b4472e3280c08f22b214cde250508a271b610484d08b10ce9d64bb5522b97773c","size":278,"data":"","first_seen":"2023-04-14T20:29:13Z","last_seen":"2026-06-07T07:30:11.57416Z","times_seen":13043,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/commonPage/lan/i18n.js?t=1772708295.314","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"596226fa21d805df17326591fda93d18","sha1":"d3e681118a00adb43bb67ad602b02b1d3548c11e","sha256":"b6191099b37f0a2930900a809dd4c72993e816014c0a52c08915999498121977","sha512":"26b5afd051737102e2312a8c40f1cc759ed6115de70c6e7ab881c58d7dc23855dcdbe678bfa8c074b6cf69b3a308240a9dd88cdadd3d4e4f0feacb2c86507d0d","ssdeep":"","tlshash":"7c21fe58f7e061e3299e8aa3eda23f6b11750abc0097340743b831ce017dba7ac6c408","size":1310,"data":"","first_seen":"2026-03-05T10:59:01.461841Z","last_seen":"2026-03-05T10:59:01.461841Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e6bbb84979a27014e74be230fe8440f","sha1":"aafe0c1dba07e91354abfb25d154c0acbed24d61","sha256":"03e9af072f4db23c6c6cd74a89c796a3c764731da4734682f3ccfc07e0e54e74","sha512":"445744eb54e6f81910f41add7f3ae90b45f311a7a3b5b86bb57079210dbe60c35b0b45ce06f3e4284c55578e2e2878d656ce445fa0040dc5e6edd47017a5a116","ssdeep":"","tlshash":"36e02649d63a68e0507364ac2b7f203129ee920ba009ce68fe2d13c16f444150b71786","size":390,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.593727Z","times_seen":14838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/common.032d44c1.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d90fe732a8918235001f90a280ee3fd","sha1":"7e16f5554ebea2306f378b175c18457aed09bc22","sha256":"35d46a2ae61a964d46b8d668fa0d32e3cdb9e975f848692ebc12916b32078e5b","sha512":"0600dab872d39f5e780664b3c654b854568548399779eb614e286d39cc74030f40c63703c08161e995f45aba2aa8c9413a64b7938d81cb20eebe1dd84c8a98d6","ssdeep":"1536:9QARRaYYKZIknaW+lwfZA/AHJQZ1WpbuRIRoxkpV48KbnmrbB2L:93ZIkaWAw7KbqbB+","tlshash":"b2b33afb73c5b2f44143eb64e41b6410b42e3cbe7f9587d48255cee4b9b0099898ee98","size":111648,"data":"","first_seen":"2025-12-19T03:52:38.055006Z","last_seen":"2026-03-19T23:48:50.675664Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","size":32679,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.487698Z","times_seen":17749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f5bce1aa50f72fd0834901c70db4f43","sha1":"41771079bee5eb45539e694a5eff580732ab26b0","sha256":"a50724b65a2657f6e67adbf98a3dd135de52b4786350f0b1bd142adff38c7ffd","sha512":"d1445eef1431e8e11779bb3aa9da243cfc04ea0abe4cb9a62b6b0f5940a9ea17ad7d0926a51925feb06ce2afc435ce9050c3955ce973407eebfa4dd1d0ca35af","ssdeep":"192:cyzyMkzf77qsBQXbhG1SUnqpT7H8DvswVAJ4jy7j3vU4P8eaoCrHoQcasI4kHwCW:mMkjq0TqEVAJ184P4DiQzR0KmgqQ2N","tlshash":"599210b876f701b24c667477875a2144e100f0ebb648ee087d4e56dc4fa8a34b3a6fd5","size":19701,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.582699Z","times_seen":17251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/livechat.ashx?siteId=65003016","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6040dc48164fe6801223cb0b5552952f","sha1":"603fbed8b7a5426e9bbb12e57bc88b7a4758e022","sha256":"7b7da61b69bae4b64fc1637348893c3281091db312f37d19ee350891bbd7ea7f","sha512":"004fc22ca684d867b2cf52f20ab5ae75bc226e1405e12572fab721a02d46ca54d739343907d3eb5bd4316207762f0c928e91718f2063fafa6d0944812b30896d","ssdeep":"","tlshash":"115175e6676e0110073020a99d7b738c98bd91593d4c8c97f8bc922035f1f9f9655ee9","size":2619,"data":"","first_seen":"2026-03-04T14:45:19.176963Z","last_seen":"2026-03-05T11:01:01.113173Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"edaddb8132e9e0880252c5b6c47bf1c1","sha1":"dc08b5b6ca432b46cca94f1f297491e1b08736ea","sha256":"b98809417c0240085bf70f2a1127f0b622c1514651737e7e4ffac4b39e4da17e","sha512":"00dbcc0a7b89e5e377bc26573fa3b9f1d09267044b3ee1c594e22522f8a17733bf041ebfa09ddb2e70a9f495437933f8a4e42875a16a3221067bf1df558c090b","ssdeep":"","tlshash":"da4000000000000000000000000000000000000300000000300000000f000000000000","size":6,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.58353Z","times_seen":20356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b012aed7e0b95b2562b7f022b6f6b9f5","sha1":"7a552c31eec8fda44dfd1d1f47812aed3c783061","sha256":"b73b8eb8178dca35b2be5a285a7e6f08823f8f78ed35c4d50c19842baec3061a","sha512":"22aef90da94c8d2198799207cfbe0dbcd607feb45706b73eda5daf9c53e36f5a8b107a5484d43e8245a3b72f8d364ef3479e936b1b3874d295b33f9909147266","ssdeep":"768:YuGaO8U6QjhvjZyZKFiEBEHvL/ejWsfxASCvfdrW//r+RHdWQXezThIRL7eWcVrK:YuGaO8U6QjhvjzihL/ejbeSC3dr+/rMn","tlshash":"2313c874d77d594600b024deac2f32862068453794160d3bffa8be7879dea3a763172e","size":43359,"data":"","first_seen":"2024-07-11T23:45:31Z","last_seen":"2026-03-05T11:01:01.153811Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2343e372ab11768fceca2ecdfacbfe","sha1":"8aa16b117c9871f40009d67ffe6b5c8c33931802","sha256":"c90fa83cc1c381c2561af894131e97bb3cc4411a7bec335526b93f650f309113","sha512":"329ffaa58ffde72ec5fe44f1b6605980e6aa09fb76e8c6b58c517c02ca38e4cb19e3ad75169fd092c609618fdbd96af068ca6cf2d8e892c131adda0d5de7e018","ssdeep":"96:fMQEH+v8nr3UTGTXVPvT3m5tTGPfT3m5idIUSNGfyjyjSriCjIC+/yAe818qJz:fMDrkTGTXVPvT3m5tTGPfT3m5iuUSNAl","tlshash":"beb14e0672c392b2a473225a4fff39002a017557c946cd4c7d6f1b825f5a7aef20936b","size":5461,"data":"","first_seen":"2023-06-07T12:23:35Z","last_seen":"2026-05-01T19:32:21.74478Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/bundle.7126c698.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03585f467dd1043465e62024d84e8501","sha1":"1e5cf8a55c64abec323fd2af7e5823a22b4c18f0","sha256":"4cbd5c79ff097907e8a54d23154bef1b9b8db97a75ec78fb7f7fbc994e723353","sha512":"3c0bfd9bea584f9bc4acdac9815c499327a54479686c2b5e8189517433d9913de43dea480a34577ca551a0327e4d2cfd2271d6c598d4994b99119261805e46a4","ssdeep":"12288:nAQt366fCmXM7t36yfCNXYpnjhftWhS4V:ACfCZbfCSntwjV","tlshash":"68d41898f081b42856736161b2af360a7236a916ba4d4468f536c1f4bdf60cbd323fdd","size":623006,"data":"","first_seen":"2025-12-19T03:52:38.036277Z","last_seen":"2026-03-19T23:48:50.648715Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/websocket/PopUp.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"07864ad2e2759d53f8f2f14dd4295bd9","sha1":"95144219e2eb702c4c4a707c3622b086876cf41c","sha256":"871bf30791bb89605b61cea815c3786246274b65ede3b8a8b8c2dd9244cfa89d","sha512":"f469d0f23c75e918d55e076d72481fca7043ac5eff9025aaac1f26860d080e4fc3c5d28f8f9ee1dae80719aca2b83f39ea82a129c221980bd7d63c212bacc119","ssdeep":"","tlshash":"9041ae54baf359a12c9b71f3aaaf30413160f2479505ed017d0cb9945f1d228b2cf7e9","size":2088,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.504581Z","times_seen":17518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c41709c2b64126b909c101a27f39153","sha1":"4ab666b36c092577acb41390ad90e96d5fea7711","sha256":"c1963697eeafb63b6c29e95da2d38d91dd907ab656e130e6e1c34d1dcd149f60","sha512":"f235dccead15199e58495c6faee849c50252b9beed29a04ae46a7a9bdbccfd569a8ab452e7fcf923b7048dfda0c3d7bd51261874642d40e994d1640ca89e330e","ssdeep":"768:u4ygd0iB6d9zYDO5qYT8fwTW3Jny+XiKZNtrt2tG:NB0iB6d9zYDO5qYTMwTW3Jny+jrP","tlshash":"e6c2b7093585102f4ecf30fbb897524f72ba95a45019a069b5fca4d1bef9f8530a6f38","size":27822,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.548057Z","times_seen":17428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ad2fd02c3e295769ecabe176e18dec4","sha1":"15f8a874205237b7f6f3ab089e5e1931db6c1564","sha256":"5fa8b6eaead76df0641c0af2b5b27b8ebafdd81fa0a6cecaecb7459f5f315c8b","sha512":"64e8e4772ad820d2d4d709d7a8e9fec2ab44e749d8e56dcdd403869213e57d9c19300086404b46d7e001bbc79db01384117b387ef66697d1597920a20ae3acc6","ssdeep":"","tlshash":"425176d8d78e499e41ba63b397da10c8255df47f0d1dd84afd8c1bd9152013921d472e","size":3064,"data":"","first_seen":"2023-06-07T12:23:35Z","last_seen":"2026-05-01T19:32:21.745652Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"536c70f3e02bd118b18219cc06efd5ce","sha1":"2cd05295a0f61785cc8987fe6194ecbc1414dc9d","sha256":"27c360c817c91319d8c5368fc43cd1c0c4aabef7531322dcee6e7e14be0803a7","sha512":"b805fad3c5293cfad388cd08171c1ff10f04dbc62e65478751659050de6e5648fb833c68d9b4174e02766b6b1ebf41e638339e4c7c9c75af7da997931d947b21","ssdeep":"","tlshash":"94510d6097dea8458b35e0a31b121748d55eb1a78d32cc86fc3f023dabf46de115d72a","size":2942,"data":"","first_seen":"2023-06-07T12:23:35Z","last_seen":"2026-05-01T19:32:21.747367Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/vendor.4f844090.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1550da77b83ea7f92fa72c28654b0b07","sha1":"bdf997b0f858feb25fe28e9aedb9ac9ab199f143","sha256":"eb4f74cbc5b25824f7f0bb24042143a6495404ce6d2316886ff2c5887e52c020","sha512":"0d4ec259e0a05aa51ad1d12030c8eb7a40bfb5dfb74c2285389d0461e1dc640ddf4b77d58628f9a1cd9a92ed9d764bd90dfb1fafb85235a2c270906ce606fc2e","ssdeep":"3072:JlPm6jZ+uUcYoazxkXfDirssXrs1zFzToZpGYPfKX9dT3ZFUxxk57AT6m/FA:mzuv+pIzMvD6UFA","tlshash":"32f31bca32957c5552aa31e2887f090ef33a1d66348cd068f6a5f5d23cb540e9277f78","size":157958,"data":"","first_seen":"2025-12-19T03:52:38.075217Z","last_seen":"2026-03-19T23:48:50.690511Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"d6984d3d96b020b0be0c099cb1999cee","sha1":"02de24d58a40ec3791f5f300e5101645d8635466","sha256":"fc8efc42d8db0b2f6266e3524aea080b058eda5827e736cc37db95fd0f3547e4","sha512":"b2b05d0c4c279f41e583575fb273e0046c276eaa14ee44d9efd7f591814726c200b805529c77054850a65ff652e73041192c452feb993ef2209a4e8577c6c58d","ssdeep":"","tlshash":"74d0a7a5d070081cd3212ab94dd2219c4acab55b73c64c007f8575fe9de6706c95b598","size":234,"data":"","first_seen":"2023-06-30T02:57:58Z","last_seen":"2026-06-06T14:03:14.282031Z","times_seen":4766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"555ab82ab1b824b7b340e206fdecd28e","sha1":"091368cba8081e889ca0d529ac131161201e8c1e","sha256":"d42089eab619cf0db3df5725f4b57ab43dcd341a3b901700ca54ff43d1c89f3c","sha512":"e702cb189f85d658abe132ae6bd9df99fa4fbfc50297cac1a0cdb66c6b191e507c75837027ed745e888af34b1b859e76a2b16086928583291d64469b0aa29916","ssdeep":"","tlshash":"17e0c0870c088013099cb4f4dd75b40c9c4ae3026dcdca87449e7394f113fa68b9b2e0","size":362,"data":"","first_seen":"2026-03-03T22:05:42.48848Z","last_seen":"2026-03-05T11:01:01.15726Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-441f4\"\r\nDate: Tue, 03 Feb 2026 09:58:09 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:09 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 210664\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17442432853478815249\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":279028,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4e41dd50bd857b9d65d4b6a6a873070f","sha1":"db3669c579873b0e27dc4e3503a3e92ac0eb93c2","sha256":"7da30473066d2efb9997bc6325969c86056befa4a0449508ec661473f05ce818","sha512":"179b6210c8ce16ca7d733c8fa65cdbcd44a3d4947e8a7d3d6e4d7249fd1c2e3bf2e435d2ab67cc720b5ad8a474a666f321fa71004e0d25e771c248e4646abe45","ssdeep":"6144:Hl0mutWDJHj0wy24GQm+wr9Y0hFwOKScYzWEjCO9aVZ/Fzlu4/k/Ixyjs3ctDu4u:HSmutWD40r+0hFpKSciuV1z/EfjsunpI","tlshash":"035412358e3fbe5e5c737937b4008a654a5047a79348d63abb4de64325b6e812cfd009","first_seen":"2025-09-27T13:51:17.760144Z","last_seen":"2026-04-05T07:52:11.17405Z","times_seen":35,"resource_available":false,"data":null}},"time_used":2437,"timings":{"blocked":2145,"dns":0,"connect":0,"send":0,"wait":286,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-sports/navbar-sub-sports-first4.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sports/navbar-sub-sports-first4.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 26 Jun 2024 06:30:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"667bb57b-72269\"\r\nDate: Wed, 04 Mar 2026 04:18:26 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 04:18:26 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9280\r\nContent-Length: 355550\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18338757728947322599\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":467561,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"52e762bedc8037cc558c13b6e506701f","sha1":"eed6f2a65d64f1e141590995c3b02b85ae48e48e","sha256":"3e7221895b0bdc2be6748de1a85d3ab61501abf4ec234770845ce03f58c19aa8","sha512":"f3bda25daf14f5885cfe7f347eb5f7d0802d8ca079a26444e619e900220e487235b1f87235991bc405de71289b0269a64a974b78bf2b4c1d4839a7b6a8725e28","ssdeep":"12288:6jxfoV9wbYnBb+7ZGkR1aiCcqUhZuTWMPimxYzYf:CA0oBb+7EqaOduTXTYm","tlshash":"c5a42306df393b7a52c17d6ebfde73136fd0014a000ce5f6aa9b65ce18e1e80451ad9a","first_seen":"2024-06-30T10:30:20Z","last_seen":"2026-05-07T06:02:57.606175Z","times_seen":79,"resource_available":false,"data":null}},"time_used":2780,"timings":{"blocked":2496,"dns":0,"connect":0,"send":0,"wait":248,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/fserver/files/gb/752/carousel/10261/1639049293895.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:24.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/752/carousel/10261/1639049293895.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 18 Nov 2022 06:09:06 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63772182-33945\"\r\nDate: Tue, 03 Feb 2026 09:58:24 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 09:58:24 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9279\r\nContent-Length: 153883\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13776323125354873762\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":211269,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"306a19f0b7b57bc2213fa467823bf4ed","sha1":"0acbd88226e6a295c4bb5bdd1a4aa814dc7b5cd8","sha256":"f587a33dd004d88fed8213d5a2f74bfefeb57da24047b7262bb928f52f949560","sha512":"faa67fdb4e5d4cdc252f17c11d0417f1a8f1ba658fe6840463e4257c16f1123338fe92ff3eb11902207a228ca152acff0d89cf88a67978d5eb8a688764dc5275","ssdeep":"3072://gSoAlJu4cNq6Jc2TYAcThZ9T/McLRiZvarGoENO3QdnM6R/3TJ3vJQxEYQjXOs:/UAlSqJAcTZT/MctiTN7dnMq8xENOs","tlshash":"562412f1ee25cfaf5f36f6b680219c0aec6516833109e2bbf5c7486298d64b15ad3580","first_seen":"2024-07-11T23:45:32Z","last_seen":"2026-05-01T19:32:21.639559Z","times_seen":22,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":304,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_d.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_d.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-16b8\"\r\nDate: Tue, 03 Feb 2026 09:58:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:36 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 4288\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14346813907697358608\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5816,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"59c688c080577c19038ac57fd2095d03","sha1":"ffc610fbc88c3be1d295e4aff206a90a00964fcc","sha256":"d614ea0da91c181f4e7e0b3fe7e1b6afd46d92603ac2fd840260af15f95ec95a","sha512":"b771c7156816eebec5d738ce41849efda6609bebaf3240624b7b0a8fa61840865cdd849d3482cb518b2faf26ebe96d979bcab2e83c51dff0acf54ae442d8e4b2","ssdeep":"96:5bIMSUAeW3hSoY506Yto4K87w/+PNKBjjO2EKSK472sO9SvKMU2HbCJnOJ/nPrmY:5bISW3hmS6Co4o/+sjjBkZ7tOIyz79OZ","tlshash":"14c18da5f3673b89416c0904affdc416bdf74e2f9c91008f2a38b21b899256175853ef","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.600085Z","times_seen":21,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_c.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_c.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1ee7\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 6\r\nContent-Length: 5931\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6497350633528515167\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7911,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"804e9c1581232a1bb74c5fc4c1e61719","sha1":"7a3604459d934778054b3a35453f46749ed6b49e","sha256":"17d114f27fdc9b82ab7a6e1a15d25db6bd77da641cb3f6d9858538b0a282735e","sha512":"340c25602d1fd6155fe362b981e1ce732ececc6c31587b2fdb3985a595b9efbb4b1d39ce16204264fa1c772969c680bfd0414d3a917b22510ecb8a7d0a47b27d","ssdeep":"192:aISLvp3wSy3gsYsGgAaYpUtvnApzdgh2p6Z6clYeMwpJpMBmAjrKhAWZlH:aJLBgSy8sjAkIpNp6blUwpJKwiWz","tlshash":"d1f1a01d23cdff5f4557827d668924593d144acc9ce37bebd86a52234c45b2412c3d61","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.650346Z","times_seen":21,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:17.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery-1.11.3.min.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-176d4\"\r\nDate: Wed, 11 Feb 2026 20:13:14 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 14 Feb 2026 20:13:14 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2398\r\nContent-Length: 33545\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8384695822402100685\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-06-07T07:30:11.536389Z","times_seen":18326,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":317,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-441f4\"\r\nDate: Tue, 03 Feb 2026 09:58:09 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:09 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9282\r\nContent-Length: 210664\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2418323260071647469\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":279028,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4e41dd50bd857b9d65d4b6a6a873070f","sha1":"db3669c579873b0e27dc4e3503a3e92ac0eb93c2","sha256":"7da30473066d2efb9997bc6325969c86056befa4a0449508ec661473f05ce818","sha512":"179b6210c8ce16ca7d733c8fa65cdbcd44a3d4947e8a7d3d6e4d7249fd1c2e3bf2e435d2ab67cc720b5ad8a474a666f321fa71004e0d25e771c248e4646abe45","ssdeep":"6144:Hl0mutWDJHj0wy24GQm+wr9Y0hFwOKScYzWEjCO9aVZ/Fzlu4/k/Ixyjs3ctDu4u:HSmutWD40r+0hFpKSciuV1z/EfjsunpI","tlshash":"035412358e3fbe5e5c737937b4008a654a5047a79348d63abb4de64325b6e812cfd009","first_seen":"2025-09-27T13:51:17.760144Z","last_seen":"2026-04-05T07:52:11.17405Z","times_seen":35,"resource_available":false,"data":null}},"time_used":2992,"timings":{"blocked":2682,"dns":0,"connect":0,"send":0,"wait":268,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-live/navbar-sub-live-first9.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-live/navbar-sub-live-first9.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 04 Jul 2024 05:45:12 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"668636e8-18f44\"\r\nDate: Tue, 03 Feb 2026 09:58:11 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:11 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9280\r\nContent-Length: 77706\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10193444733382035762\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102212,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b91845e58addf2dc236050cf73f47f79","sha1":"5b65deffd65b3dd01aac2f819a7db265306e2d77","sha256":"98838259d76bd57a0dfddc4be0163cf8fb8406548c7a130d128d23c386712e7f","sha512":"d1c820bcbe730e6992ecdcc70cf6a626b9891ff5682d774816993c48a4f8766196f6c4924810b7fb3355d5d764ac0f023aecbc4bdd46c255398b71a513687842","ssdeep":"1536:mFfmkFaMGQf8qmFrJNBg4eYaAJ/w/QYA6HOq0aPCz8SzYE2woG1FcN2dl+XnD:mFf/gHQLgJvw/QYAOGaajsy8sAXD","tlshash":"26a31281933b6cbf6bd44c6551416e0197e34b636819b08fd1fb6fc623270684a4adeb","first_seen":"2024-08-23T07:41:30Z","last_seen":"2026-05-31T00:12:56.761217Z","times_seen":79,"resource_available":false,"data":null}},"time_used":2971,"timings":{"blocked":2729,"dns":0,"connect":0,"send":0,"wait":240,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/partner/partner-hongtu-white.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-white.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1aab7\"\r\nDate: Tue, 03 Feb 2026 09:42:22 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:22 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9994\r\nContent-Length: 82844\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1802104506906790231\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109239,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"050b6873c440d2c512d27f83bd536ba3","sha1":"3f1ef3c0eb4037170fa7dc0fa5f6f8b667eef5e9","sha256":"cab2392ea2953b735b5410022f07d4590018ca546e1fe21b2feab5db0a4e69ad","sha512":"562cc6092d643d8b5487bb406860661b215d8c94d4a51c63aa9a6823fbe6533acbf95133d385781c9ea5f8913adfd26810e6903296b2106ebed51c4c4ccf2331","ssdeep":"3072:InJWQnDraF6gDT3Kxms0QQ9OPMGJrcPaF:9SDu3DMmTrQgPaF","tlshash":"50b31216b50e3e0f2b55dc0f514ee9f6cb920786850deece4768348462c9e85c3df999","first_seen":"2025-09-06T20:06:14.275441Z","last_seen":"2026-04-17T08:59:04.373557Z","times_seen":1773,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/index/Language.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/index/Language.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-128a\"\r\nDate: Tue, 03 Feb 2026 09:58:13 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:13 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 3528\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4394390371325276612\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4746,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a3cac94d19f50d4356aa5f98e772b4e2","sha1":"eef6f9f47ebf61f8bd6384c3005d90e2f3c8543d","sha256":"7294cd33f52127dbb3e19632f2875b96768565318313b416a4962ed9dca7df85","sha512":"6c7a96a1a225a22da328d8cec37d97e04422812b6eeb8e61ca44bf1f8aeb1028ba5eb888baf8f31cf4816c651d967053ffb7fdcfc04c77be97636b2d3ae9e7cd","ssdeep":"96:km4MSUusLFVZnE9nr6IQaDHN1ooYfT2AWuqE0qRbEiTh+ZAcGxz6Z5zERkE:km4mLFnE9nr6MB1oT72AFqE02bEYEAXZ","tlshash":"afa14cbca6f7761f34be225c3b23b133ac315e2a78575675f0c595eb0a05a2492e006b","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.683864Z","times_seen":21,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/fserver/files/gb/752/carousel/10257/1638947210265.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:24.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/752/carousel/10257/1638947210265.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 18 Nov 2022 06:09:06 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63772182-3982d\"\r\nDate: Tue, 03 Feb 2026 09:58:23 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 09:58:23 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9279\r\nContent-Length: 173322\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12697460429864907582\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":235565,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"25895633b2241eb466b8cfa3402f3ced","sha1":"f292d6c6b0d395fd0f4ce514e21efc76dd669bb0","sha256":"5d23ae134b09f9d1f290751f7cae0b1fc230cdf76f41fce13fa103672ab61647","sha512":"659c6527977a05f76ee27ccd0740b2121c2dabb0e299dafec41c15d142297aecac78db7807a65035740213e16f43dfb1ebab67473068596f9929f107d98fafe0","ssdeep":"6144:4v8m6DrQx9yUHKr/hWX22zYNJ2HsSkfxsg:4v8FrUswVnzYT2sSk+g","tlshash":"4334127356866db24f3faaa250193d015ef01cab11dcd6c87398267bbfea5b11c72270","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.563604Z","times_seen":22,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":297,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_a.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_a.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-cc7\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 2407\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9553293718645631096\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3271,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8f37b28588f1718493d1d51b5cc50aa1","sha1":"92d2f8b8facecaeb525b3ced7537b50e9cc4faba","sha256":"8bf0d3e011cf350b24c4b27c84e27eb65ba9fba84107d0da60cd528c9e3d43e4","sha512":"7e2f647e7b78c32c9fadb632bf237bbae1568f3e62921a11afbaaf66f41891531b470d4902f2c4b2ac91ffbe7f60a48794660dc1a8a16239c504c08ea7fd458b","ssdeep":"","tlshash":"79612b3ebeab771e586042accfbf79157c264e86d4d81a6ddcea21564a4176003c1588","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.618956Z","times_seen":21,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":302,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/index/icon_a_hover.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/index/icon_a_hover.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1132f\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9276\r\nContent-Length: 53222\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8851978822801316421\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":70447,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b59ea7ff7a830336f79559ede1afe243","sha1":"6e347a0011b3170d158c0854dfed22dc6161a819","sha256":"be094385da19235d1538bf7f6a6e1cf9f25f94d5a0cded3e47f19f26ef082840","sha512":"7fe2755ae52b5c67eb267f988666d396d5d1ff04f3f6b207aec79d32bcd0ab33f803d7a6f8269cef5a12e5fbb15944754aabf7f09ac814cd57df7aa6e1eaae6f","ssdeep":"1536:TsSMptJv7RAFQExODJZ98TvIMN2PTBE074pvnptCN4qOcCDvL0:N67yF5xOD98TwMN2PTBEaWfCtO1Dvg","tlshash":"ca6302328a4759254e21034d833bb552bd8c6fef60c9f4b971e1b72205e49ce6e66cac","first_seen":"2023-06-07T12:23:37Z","last_seen":"2026-05-01T19:32:21.720409Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":796,"dns":0,"connect":0,"send":0,"wait":299,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 27 Aug 2024 03:30:00 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66cd4838-6caf\"\r\nDate: Wed, 18 Feb 2026 23:23:16 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 21 Feb 2026 23:23:16 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2398\r\nContent-Length: 7746\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16406371486763039588\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27823,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27668)","md5":"9c41709c2b64126b909c101a27f39153","sha1":"4ab666b36c092577acb41390ad90e96d5fea7711","sha256":"c1963697eeafb63b6c29e95da2d38d91dd907ab656e130e6e1c34d1dcd149f60","sha512":"f235dccead15199e58495c6faee849c50252b9beed29a04ae46a7a9bdbccfd569a8ab452e7fcf923b7048dfda0c3d7bd51261874642d40e994d1640ca89e330e","ssdeep":"768:u4ygd0iB6d9zYDO5qYT8fwTW3Jny+XiKZNtrt2tG:NB0iB6d9zYDO5qYTMwTW3Jny+jrP","tlshash":"e6c2b7093585102f4ecf30fbb897524f72ba95a45019a069b5fca4d1bef9f8530a6f38","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.548057Z","times_seen":17428,"resource_available":true,"data":null}},"time_used":2855,"timings":{"blocked":2553,"dns":0,"connect":0,"send":0,"wait":301,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/fserver/files/sportTeam/football/it04.png","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/it04.png HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=2b8dcfae973a524ce800a350c729cfda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\netag: \"5bed34bc-1be4\"\r\nexpires: Sun, 08 Mar 2026 10:58:21 GMT\r\nlast-modified: Thu, 15 Nov 2018 08:56:28 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 7140\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7140,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"bebb28464026e982f3247044bc244cda","sha1":"6850144ff65e2a30807efe71e0c0abffd9d18224","sha256":"e2d458bab2e5d027c190a9d710e4d74d717435fe731c44fc4aa2e50b95f2e388","sha512":"2a39328f6f9b52911c868a123ccf078d48f3de612d5b24abae9133fc50f77ffca6da837f7b0627915c8b636af0bfee64f64f88ef3f06ac7e57d986d7de2d189f","ssdeep":"192:ABnbBvxQFzW9D6FxfEPBVTOinpljg2vB80IuVkJWlVKHU:ABnFMzW9D6F8BRpnPfnCJWb","tlshash":"48e19ef039c4dad1c04aac750f2681024abbfe1e55a701a731ef6f59ed37c649b6a240","first_seen":"2023-05-13T20:10:02Z","last_seen":"2026-03-05T11:01:01.106007Z","times_seen":165,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_a.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_a.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1804\"\r\nDate: Tue, 03 Feb 2026 09:58:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:36 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 4540\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10754696302135185943\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6148,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"eda604756e8d4ee6bbc245a528a49a5d","sha1":"8251e717a0ca719fef5155e3b6b81de0e0c3df5e","sha256":"70a17386103fa7c72941ff128e7e726fe01e28953b608a9561d6ffd2141fccad","sha512":"569f4042e5c55d2957a4abcbbc4f8b454cb3af0d6f1f22b8c0dbfe0886b7c87da4ce27247a87cff8a7029276a1c067b58b54dd8938456ad9ea42d698ee5490aa","ssdeep":"96:8IMSUAeW3hSo3OIYhPxExTW2iqUedkuCmHpXFNa3pOQvfPJeoj8OLIc0XKdAom7u:8ISW3hGZEniXlsJYv3/LNRio5Yl2dv","tlshash":"bfc17ebe1212651ea8890b387e46e7427cb9334e89e51de261523a0f95db7b0908275e","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.573776Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1859,"timings":{"blocked":792,"dns":5,"connect":263,"send":0,"wait":275,"receive":8,"ssl":514},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_d.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_d.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 30 Oct 2023 02:30:07 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"653f152f-dae\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9272\r\nContent-Length: 2720\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5753525627967701078\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3502,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d392fcd967338f38b8fecb0a6bac0925","sha1":"f7255370ff24393dafe98b030f6c559e146d77b7","sha256":"b1522edb4928e3878c96eee698f909f924808b1894880c8b91ba940ca45dd0ac","sha512":"d37c125ef0f51638473b9ba1c564a4ebd0193c94e014ee3ead25d93c41e38b6d8537355fcbdf46957d1eda3115038600f5cc8028c611b25a0c5709e157f216e2","ssdeep":"","tlshash":"0d715cf62edf19b60e23097a8e711953ac385d084b5df839c27edbc5cc2f1628092d88","first_seen":"2024-07-11T23:45:33Z","last_seen":"2026-05-01T19:32:21.587751Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2439,"timings":{"blocked":2196,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/partner/partner-hongtu-silver.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-silver.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1eb1d\"\r\nDate: Tue, 03 Feb 2026 09:42:22 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:22 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9995\r\nContent-Length: 95601\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4566949651220460993\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":125725,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5f6980b5f154060a1d83407f4c95b0a6","sha1":"62e410c7edcbbdcb24a07444f9ebaa79a4047f92","sha256":"522e1c9e3407783f021aa3d7b4c19179ee6d2784358e8dc3960fdd93e996f720","sha512":"ffee4c4b7962e3b1ab48896394cc18e7ed3eb1d199a56e4bed2c29934b20ee1706619969ac82a3c6840cb1b617f90d7c16a9c7080b2d8c1a905be0f5ca922206","ssdeep":"3072:uVcAUgIZn4dMj6qCKK2si2pXQ5kbTSfE2BBsUdSTIC4RvJ:uSAUnmD2AgObTEE27fdR","tlshash":"20c313e136ecbc5cee44d632a5ca9960c250abde89f1c48bc6da50ca141335c9dceedd","first_seen":"2025-09-06T20:06:14.266784Z","last_seen":"2026-04-17T08:59:04.285034Z","times_seen":1773,"resource_available":false,"data":null}},"time_used":2603,"timings":{"blocked":2325,"dns":0,"connect":0,"send":0,"wait":275,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/style/common.css","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/style/common.css HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 07 Mar 2024 09:10:40 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"65e98490-1028d\"\r\nDate: Thu, 05 Mar 2026 06:18:07 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sun, 08 Mar 2026 06:18:07 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 14597\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9587915757151787764\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66189,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2091)","md5":"f8a8d02074ca456d445b2075a7b851ea","sha1":"1e833e642e843a136a45d46841f4a0696fd3a4d6","sha256":"41be918a8694d3933e588abd227d48d9f6925c903defd87e480a8b2de867017b","sha512":"730e84d4b073fe0511180aa3323bb9234c65e26c7fed206f7b6f667ed582a2e7ad65de918e13201b6b95761a8c6bef5f1a20afb99520726addd6cd8838e6df30","ssdeep":"1536:RjajL+rmhp88RHmh2JLuVIgKqaW8GsaPs5RYa:2nR8fh8GsX","tlshash":"51532a379762224e3117c59af9d6abab1a3ee013a31209bcfce7251dc28f544067b7c5","first_seen":"2025-08-19T13:19:48.966701Z","last_seen":"2026-05-01T19:32:21.68639Z","times_seen":15,"resource_available":false,"data":null}},"time_used":3761,"timings":{"blocked":1671,"dns":1043,"connect":276,"send":0,"wait":362,"receive":49,"ssl":357},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/commonPage/lan/i18n.js?t=1772708295.314","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /commonPage/lan/i18n.js?t=1772708295.314 HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 05 Mar 2026 10:58:15 GMT\r\nout-line: gb-cdn-801\r\nuuid: 00752-01-00000000-17727082957ccc\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 813\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1310,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1217)","md5":"596226fa21d805df17326591fda93d18","sha1":"d3e681118a00adb43bb67ad602b02b1d3548c11e","sha256":"b6191099b37f0a2930900a809dd4c72993e816014c0a52c08915999498121977","sha512":"26b5afd051737102e2312a8c40f1cc759ed6115de70c6e7ab881c58d7dc23855dcdbe678bfa8c074b6cf69b3a308240a9dd88cdadd3d4e4f0feacb2c86507d0d","ssdeep":"","tlshash":"7c21fe58f7e061e3299e8aa3eda23f6b11750abc0097340743b831ce017dba7ac6c408","first_seen":"2026-03-05T10:59:01.461841Z","last_seen":"2026-03-05T10:59:01.461841Z","times_seen":1,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/themes/gui-layer.css","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:17.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-layer.css HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gv8yqx.pham.xin/ftl/commonPage/themes/gui-base.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 17 Aug 2023 08:10:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64ddd5e1-c760\"\r\nDate: Tue, 03 Feb 2026 09:42:17 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:17 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9809\r\nContent-Length: 6923\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18313254932589537524\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51040,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (489)","md5":"858eefc3fa70af7d0115c901908471f5","sha1":"29c181bbbc09a424f7de7cb57629bd8a9e3c679a","sha256":"9f6a77c93f998e065f1ed52eb9943a3c560a50366bba2c8a34a4a1223c793caf","sha512":"3731234bfa0b2abf45883da0ab74960a77f167dc158f4eae4f9c58293bfe6ccf322fabdbd4100bd5fdba0f463cbf18ba44d89b0bed695b65b8edce7edc9441ec","ssdeep":"384:RCEe+wekUqKrIQycnvqP9bQmAJS0OuaIHmOKpPg+2fF93sJJ:RCf+wekUqjpqCP+OuaIHmOK6+2fFVSJ","tlshash":"67330d22a16816cd7156eac8705dbab7b7fc8c02e21717bcf8ab304fd28d5439476a47","first_seen":"2023-08-17T12:06:57Z","last_seen":"2026-06-07T19:03:26.509654Z","times_seen":16316,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/mobile-api/v5/origin/getFloat.html","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:18.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"POST /mobile-api/v5/origin/getFloat.html HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 68\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"locale=zh_CN\u0026terminal=pc\u0026is_native=false\u0026version=v3055\u0026resolution=2x"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: https://manbetxss.com:8989\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Thu, 05 Mar 2026 10:58:19 GMT\r\nout-line: gb-cdn-801\r\nset-cookie: route=169b5c290b6963ddbef067cfad367b83; Path=/\r\nsub-sys: mobile\r\nuuid: 00752-01-00000000-1772708299537d\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 2451\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14193,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"29da823f2ea88616e88776099183c554","sha1":"c3c686176c59f5ee15d506c7dd221740d2d16517","sha256":"8ea383cf9eb90e7421de269bde13fe217cf28a99d862b7b5447369541ba4a264","sha512":"98d52119cfd18f09aac3e2ee738190b2f0fc7641399e7527affd2279d7f17cdaebbb1daaf470ddd5e0f8ca17b0bb5efdade8aebd4fad4609babad96edf1d293e","ssdeep":"384:CZSrYlIa7IaNIamIaJj3wp3Rp3D3c34f1pfRpfoz3wp3Rp3XfApfRpfZz3Up3Rp7:ElIa7IaNIamIaJj3wp3Rp3D3c34f1pfV","tlshash":"c6520213e158c009f11684d9b125be35318c3a5fa7e75e28abac9978eddb0b3336174e","first_seen":"2026-03-03T22:05:42.31538Z","last_seen":"2026-05-01T19:32:21.693012Z","times_seen":13,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_e/icon_a.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_e/icon_a.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-e9d\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9272\r\nContent-Length: 2761\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8611259045000467369\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3741,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"860529bf202dbad198e3f70b90e2a5b6","sha1":"f413096f2b7b8cf856f781b239389eb1c84a0f19","sha256":"b7b836a3bd10b9a91cea2eaf1bb6c30f122d42701388874766177604251c2d7e","sha512":"8ecaca5b5f0d82b30e32a940a75de44b7660a6bf8fa941f4c90f0d4a35faaddd996e9d39ffd1a287955f7f3528b0b4803b930523d9efaee0999b6dc299efb82d","ssdeep":"","tlshash":"79713b3d1b6a7c1b5433835d82d52723253a401b1a4c3aecc83d68de8953fa412a1ada","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.617455Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2219,"timings":{"blocked":1941,"dns":0,"connect":0,"send":0,"wait":268,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_a.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_a.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-15cd\"\r\nDate: Tue, 03 Feb 2026 09:58:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:36 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 4163\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1078844950021811275\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5581,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ebfed11ee4e3c1818de7c649273385e3","sha1":"fb7d84b4df62a8544c65b894e3070d51c1c41ebc","sha256":"0ba825a75293cb473dafe7c366001e03bb19aa8df6b545a4daa2b07b8291ca72","sha512":"759341804c3213587bce49a82b1b5b54776dd68e9234bb7eac2eb4ef7478f4cf2f01b2045eeee188b35fefaba1322e55821553e2ae9b2915798519109907cc48","ssdeep":"96:eIMSUAeLFVNpDR0P35cZwENadRWj4o8R5RBeI1Wnf2Q98eQZEfhf+w5+GOuuwQKM:eISLvDR0XTMj475nhWvrQY5WH","tlshash":"c0b19e72a85f37815020034865a8b59c77753cd6de462cdec12d909fa682ef8ade20fe","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.649027Z","times_seen":21,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_b.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_b.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1ce9\"\r\nDate: Tue, 03 Feb 2026 09:58:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:36 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 5542\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2496314693710142512\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7401,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e14e779ab74cc1be6a17c3c5c09f04ff","sha1":"59fa991066abdd49308a8dee6e9c3f56048e9290","sha256":"623396127aa0846adc94f4c66aadaa4eecea98a67e9e202cf169063c833e95f2","sha512":"16f0a1781eefa7f834f921cca72ba51c8223abda04322fa4bad7204d54aa4d31e36ad66c1e7ac075357359b478b5bf22957bef91e3f4cf4982edb5e983677da7","ssdeep":"192:rISLv6/iVklpI3GbxJCwwuZLV3cFV4irTA9NkV8PNnHWRUX7BVstX:rJLi/iVklyU7RT3cFJQ3w8BPX73C","tlshash":"2ae1af3c6a3ff73a900c197c5e8dfb97f85c228c2dcb6d6d447b32942911e788261064","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.580732Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1478,"timings":{"blocked":577,"dns":1,"connect":281,"send":0,"wait":313,"receive":11,"ssl":293},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/favicon/favicon_752.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_752.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 05 Dec 2022 08:15:08 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"638da88c-d34\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9272\r\nContent-Length: 2485\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6512106135649799560\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3380,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a689115c581452e5e1849d14b1509243","sha1":"fb156ddb4949dd49c5060a5c68a1af1f206ed48e","sha256":"913f73a3876446d559765631974553443549c798c81eaf4573f8d4f2babf1d31","sha512":"bd0e95b48626a040ce785fc61bdd367545370cf9fc985585435cbc7723c8ac1b4abf8999580e06432541aa0bf868572a268cf605c82f74ccf5567402b86fa155","ssdeep":"","tlshash":"cc614c37738d3c2a1ae84d9da0aa564b3ff59a6b5ea75f35d02d19831078f9c40c044f","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-23T08:38:57.887449Z","times_seen":26,"resource_available":false,"data":null}},"time_used":2618,"timings":{"blocked":2383,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/fserver/files/gb/752/carousel/10262/1639483416494.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:24.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/752/carousel/10262/1639483416494.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 18 Nov 2022 06:09:06 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63772182-3ad5b\"\r\nDate: Tue, 03 Feb 2026 09:58:27 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 09:58:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9279\r\nContent-Length: 173966\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8113579047509830986\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":240987,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6d7e7a7ddc209cc1cf84fb4dd21f1f15","sha1":"46ae64d172fe9d8fc99a0d3d6b0707c072f262f1","sha256":"dd04f3ab0bcb88ca1b1c1f9f0bcc1823a8245e7acc29a12d552373c4fa435385","sha512":"b0355bc83b478fc923cec00a3b2dd90357a1879e4c1b3b4b7f85fb78afa4ede73eb4e25f1160dede63ebe7865ad4a3728bf300205767366be5bb7d755ff66b4e","ssdeep":"6144:0r2heVUse1g79HqDpFIN262Ftl1JXcj8e3H70dWw:oSeVPY7fl1JXc/X70Ew","tlshash":"2d34023040857e2ba7b858d06f383e536e442f33b19156815b4bbde20dad4386de6e7b","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.641859Z","times_seen":22,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_e.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_e.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1c7f\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 5\r\nContent-Length: 5458\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6200886715994040643\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7295,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"25972b4c5c47d066fba6bbb8867158e8","sha1":"77d6a31e6e9c3c3a3b51ccc7ac4b088709e610a2","sha256":"56efa74d3d156bc4ab5d9eb667e4bae4740a8003740bedc464d193dba7427fdf","sha512":"ac72528499f93d929c236ff8eca6fd813265bfda82b3b901f49c93b88f2163e2f2e439fd18341c5ea00498853837747ae624e354caf51c12f051cacfb93067e2","ssdeep":"192:2ISLvAGEbBdk/AEjeS1O34XjH9QNUpNlP1Fw6:2JLoJqd1OITeNU7w6","tlshash":"bae1af7e0ea6df488c0e4f3834753c2f7c74368a296d15984a17334ff247be55a90586","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.723193Z","times_seen":21,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/message_zh_CN.js?v=1772438913332","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /message_zh_CN.js?v=1772438913332 HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript;charset=UTF-8\r\ndate: Thu, 05 Mar 2026 10:58:15 GMT\r\nexpires: Sun, 08 Mar 2026 10:58:15 GMT\r\nout-line: gb-cdn-801\r\nuuid: 00752-01-00000000-1772708295a027\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33499,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (15759), with LF, NEL line terminators","md5":"5e29a736bb07482814f4fb40f94618e3","sha1":"95031dd994aa15757b741e35e8165e6e54b396e6","sha256":"9cc0606e9e078be2bd4a7f0128364ad8a989ba363258d3d6058d8cf79b1fd3a8","sha512":"6df469c4d40670119fc0071f8339fc104ef3f9b8e96608462fb533295ae361da6c177d7d67a3ea50bb2da87e8c27cab6f4a54019f8feb61c5a846350d315c8c8","ssdeep":"768:IIy92nyfB+vODR01IRBG3Jpf3OEg7/wiwL38:Ib9BB+vF1IRBG/Op","tlshash":"05f24c8746fecbf68a4a0af99c5301ae22b557c8c9ec79147f90ddd92b457c900a7383","first_seen":"2026-01-15T08:15:21.544222Z","last_seen":"2026-06-07T07:30:11.553837Z","times_seen":6773,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_e.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_e.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1c7f\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 5458\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10339597653324527559\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7295,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"25972b4c5c47d066fba6bbb8867158e8","sha1":"77d6a31e6e9c3c3a3b51ccc7ac4b088709e610a2","sha256":"56efa74d3d156bc4ab5d9eb667e4bae4740a8003740bedc464d193dba7427fdf","sha512":"ac72528499f93d929c236ff8eca6fd813265bfda82b3b901f49c93b88f2163e2f2e439fd18341c5ea00498853837747ae624e354caf51c12f051cacfb93067e2","ssdeep":"192:2ISLvAGEbBdk/AEjeS1O34XjH9QNUpNlP1Fw6:2JLoJqd1OITeNU7w6","tlshash":"bae1af7e0ea6df488c0e4f3834753c2f7c74368a296d15984a17334ff247be55a90586","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.723193Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1458,"timings":{"blocked":1039,"dns":0,"connect":0,"send":0,"wait":418,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-live/navbar-sub-live-first5.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-live/navbar-sub-live-first5.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 04 Jul 2024 05:45:12 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"668636e8-142e6\"\r\nDate: Tue, 03 Feb 2026 09:58:10 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:10 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9280\r\nContent-Length: 62826\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5298776030505083619\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82662,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c5662c116ac6ba5103d5fe881042ae3c","sha1":"fbf4a22c0ba4e814e7ae301930b3b8fb5de619d9","sha256":"1f0411ea264b7f2a82d3ecfc24bae6269cd38d0123b5d7e48fda9ad00a7eb7e8","sha512":"7d5bf85f49d3a27b739f1b20c9e66b7f34bd4b0fee9b66741c85b343ec058e755b1728dd4472738311f98ddac2aa8baa81db790d61903d7a25138fcd1bb1f69c","ssdeep":"1536:c+39danrmJH9tsWlHSM/AdEtmPhyUvC+wCONcCD3AcyhZ+OB98f:pKrmJHbsWlyM/8RPhzl3OCMQckgo8f","tlshash":"ca8312722ca3b159b48e5061183f0c150ff2e2e35c7bbee82a553f4152f1a2da51fa9d","first_seen":"2024-08-23T07:41:30Z","last_seen":"2026-06-01T05:12:49.19412Z","times_seen":80,"resource_available":false,"data":null}},"time_used":2503,"timings":{"blocked":2256,"dns":0,"connect":0,"send":0,"wait":245,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-lottery/navbar-sub-lottery-first4.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-lottery/navbar-sub-lottery-first4.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 19 Mar 2025 09:15:08 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"67da8b1c-1ea1a\"\r\nDate: Tue, 03 Feb 2026 09:58:11 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:11 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9281\r\nContent-Length: 95347\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18232382667758576459\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":125466,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8e913f6db3d77249601765d3e6a67711","sha1":"fa714d81b7c8ad75b9aa7b93f558f8e8d6158478","sha256":"41a57bb6b528f67d0a9216f557f20878fd80a8a66462ec3b39ab3c79470b726d","sha512":"3399e93295011a9e4032952d3e4d8473ac9c9182db7e8e54d57ee5f1418dc5b7340f9b615558c16120a3afa4965e0d97ac8a7123828e238a58a39a9969dff394","ssdeep":"3072:YnDi30Yu7P9/L1odDefZl+Wr02Z7aKZpVeVDJdqFYiTx:amEY6B1ZfL+002t/ZpVeE3Tx","tlshash":"f4c3121d2c3e5da000bfd341646bcb902fbf97ab62366d5796ac21d1f47ba8ad1cb500","first_seen":"2025-04-04T11:40:06.825688Z","last_seen":"2026-05-31T23:24:43.684255Z","times_seen":170,"resource_available":false,"data":null}},"time_used":2735,"timings":{"blocked":2480,"dns":0,"connect":0,"send":0,"wait":252,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/partner/partner-hongtu-purple-02.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-purple-02.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1b32b\"\r\nDate: Tue, 03 Feb 2026 09:42:23 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:23 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9995\r\nContent-Length: 84586\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13147564657785505557\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":111403,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d043d074c686f48dfca9d02ba3e7b670","sha1":"a5fd625703018e34f86c2b4f2f487ce5beaa0903","sha256":"f06a3aa1663a356ff269f6d89768597db1834ac6cb5ab01832786de25d7f1531","sha512":"60202e2a8ab8f0a733d26c38f479c634bffe0fe89253d4aa8f6c91eba694b4c7d331d778926803cc5c65dc678e0125aa9fae04bf66dca45dbe214bb50d537db0","ssdeep":"3072:boG85QSt1cl/lHGqN5+0Ra0h3tGgWUdL3krWqM:sP5p1AV/fRaIAUdrkrWD","tlshash":"16b31240e7a0fda58dd09f4b8a673a795f3c072eb753f0ac94836170837aa9e1257748","first_seen":"2025-09-07T00:50:47.7251Z","last_seen":"2026-04-17T08:59:04.369621Z","times_seen":1763,"resource_available":false,"data":null}},"time_used":2605,"timings":{"blocked":2357,"dns":0,"connect":0,"send":0,"wait":246,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/fserver/files/sportTeam/football/fr03.png","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/fr03.png HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=2b8dcfae973a524ce800a350c729cfda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\netag: \"5bed3720-11c6\"\r\nexpires: Sun, 08 Mar 2026 10:58:21 GMT\r\nlast-modified: Thu, 15 Nov 2018 09:06:40 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 4550\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"09aa5c84ff28d137159577e1a7e30015","sha1":"708dce5c55ff46c9e223ef729f1a3fe60b7216f2","sha256":"1c41bffff1f4c67df313b96c9ae654cf645f94d862efaa3f1dab8b282793b3dd","sha512":"ebc6e77df55e593afb79fdcf997290889ce4283ed583f978c3bd3a6e60d7281a96140eaafb126bd1f8805464fc8b860b952ec96ddb28c5b3f902e97802e2cfd0","ssdeep":"96:CV/sg2e3Odu8pZhiRBNp4uB6TGjDqdY70C8wUZokRUoBTWcq:qX2e3Odu8UDquBuLg85UoFWcq","tlshash":"24916ca127ea546f5735921223188630da1d7b00adbaf1933e85a6679c3681d0fc6f11","first_seen":"2023-05-19T01:28:08Z","last_seen":"2026-04-18T23:52:30.44028Z","times_seen":373,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/fserver/files/gb/752/carousel/10009/1560229436941.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/752/carousel/10009/1560229436941.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 18 Nov 2022 06:08:40 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63772168-47418\"\r\nDate: Tue, 03 Feb 2026 09:58:39 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 09:58:39 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 219229\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13897121428967111509\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":291864,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5309bf784beb86950c327af6ebd98a3f","sha1":"d25e0cedab7dce46b2883d40769239dda5f640b6","sha256":"23baf9d54c5c61945e7c34cde6dfe46737869f0150a3cf4ed453b9a3bbc879c5","sha512":"0a6907102d16cb4e23008eac070dd43b5e041c9e146687c3669a428bc7036229e7c6e55229eb110d9619caa8a244a53c849a3a8cfc704e84d31c0e76bee7e9fe","ssdeep":"6144:U2gVlTPorzhm7d5FghYTy8k+QnkuB7N1gNQLk8yz4uck5b/WKuB:U2gVlboaFOFJJTPyUEZWKuB","tlshash":"b45412b5da4c3d25d7004301e2a6cf682eb40bd5505ca593bbc836836feb98d8f8a5d5","first_seen":"2023-06-07T12:23:37Z","last_seen":"2026-05-01T19:32:21.677857Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1537,"timings":{"blocked":1282,"dns":0,"connect":0,"send":0,"wait":248,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/index/getAppsUrl.html?device=android\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=android\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Thu, 05 Mar 2026 10:58:19 GMT\r\nout-line: gb-cdn-801\r\nset-cookie: route=44d17259ab44b1b54887077d522d7137; Path=/\r\nsub-sys: msite\r\nuuid: 00752-01-00000000-1772708299913c\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 904\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"bdf7acf8d67c86882714e3d305b2675c","sha1":"0a32573795ba187814f2da27420e69537774a101","sha256":"33d08417280a4d636a1c101e8eccb6cc0d9f76594819989d6b8eea4bb9548e5f","sha512":"6e5fd0dc1d7c44b0522e41e417f72ea160ff08f28b2c3065afff9752d1e7dac4a4c0f8188e5adfcb936bad86742a668e8f704bdefda674047a73fd70a5912e2f","ssdeep":"","tlshash":"75219aae6722ec900cca5401b2ec1d858f4364e52b9466b2fd0eae7208bd4725f9671d","first_seen":"2026-03-05T10:59:01.480505Z","last_seen":"2026-03-05T11:01:01.138598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-441f4\"\r\nDate: Tue, 03 Feb 2026 09:58:09 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:09 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9282\r\nContent-Length: 210664\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11011640828383403682\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":279028,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4e41dd50bd857b9d65d4b6a6a873070f","sha1":"db3669c579873b0e27dc4e3503a3e92ac0eb93c2","sha256":"7da30473066d2efb9997bc6325969c86056befa4a0449508ec661473f05ce818","sha512":"179b6210c8ce16ca7d733c8fa65cdbcd44a3d4947e8a7d3d6e4d7249fd1c2e3bf2e435d2ab67cc720b5ad8a474a666f321fa71004e0d25e771c248e4646abe45","ssdeep":"6144:Hl0mutWDJHj0wy24GQm+wr9Y0hFwOKScYzWEjCO9aVZ/Fzlu4/k/Ixyjs3ctDu4u:HSmutWD40r+0hFpKSciuV1z/EfjsunpI","tlshash":"035412358e3fbe5e5c737937b4008a654a5047a79348d63abb4de64325b6e812cfd009","first_seen":"2025-09-27T13:51:17.760144Z","last_seen":"2026-04-05T07:52:11.17405Z","times_seen":35,"resource_available":false,"data":null}},"time_used":3021,"timings":{"blocked":2773,"dns":0,"connect":0,"send":0,"wait":235,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/themes/images/layer-dialog/gui-layer-close-bg.png","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/images/layer-dialog/gui-layer-close-bg.png HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gv8yqx.pham.xin/ftl/commonPage/themes/gui-layer.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nEtag: \"5d848f4f-529\"\r\nDate: Tue, 03 Feb 2026 09:47:17 GMT\r\nContent-Type: image/png\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:47:17 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9271\r\nContent-Length: 1321\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5053945518749370775\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced","md5":"a2e938202c0287b9c82461a6fd94dee9","sha1":"b5e2adc7cb07c18a70a88af314e56b946ec1a1b6","sha256":"df9ce20db277ad8302c704a73aff5024683a0d38aff0d3e7e884a67a24439936","sha512":"2c035017e6ef6d6be24cf26972434ff7b16760ac6f5418d83652e745007a117cb79f4f9fa542cf4098b9141d4851f748c5151cb1055ea2b1f42eb70eb72a809f","ssdeep":"","tlshash":"1321830eea4368009648bdc114f3a457f7165f80acd8e2f46e8aac5d2d103f96abd6d7","first_seen":"2023-04-30T20:28:22Z","last_seen":"2026-06-07T07:30:11.522472Z","times_seen":16458,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_b.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_b.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1797\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 4503\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6763626669809597135\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6039,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"bb7b7c7884f824df29db8da126ecf243","sha1":"153f6485bcc46d0baa3b68491b9619ae8f45ba09","sha256":"c613cdc294a9391026085e884dde1d946eb047533b4484f79a7a090591bf8f4c","sha512":"5452904a53a2724672517fdeeab948e0ae45c72c17627c16ec85cb2aa7b13146d3066d59b162c0e7235ee7f25381dc18a69be32677f29a1e65c019f4b31c4b5c","ssdeep":"96:rIMSUAeLFVNpzjCETwlYrpntXAh3JtPNJOsJsRBPOsmQo9HkhMixAMqRcDYu1OiT:rISLvzjCQwlaQ1PNJCg9H+MAAMqRcj1b","tlshash":"d6c17e721a9b6b1f6940895c7187262c3910ab3714537bcf91e86afc476e7b513d0cc8","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.696989Z","times_seen":21,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_c.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_c.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1381\"\r\nDate: Tue, 03 Mar 2026 09:06:31 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 09:06:31 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 3718\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10272839105313852592\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4993,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4dcbc3fb9e9311d563536b9b1083a070","sha1":"a4c63959a46cd404de7ba8919a027b2ffeb36cef","sha256":"a17d4827a223c992203bff42865137cff1c4585914e892bb4879c14253b065cf","sha512":"a692690d200bd3b64b6c129350e9088723fc9be0f217193bdfcff07a31570ac7c756defbb3173a58be27cc02c1756fbb9faf15304f09f732d88089aad20af586","ssdeep":"96:lxIMSUAeLFVNpj1k51Ud0eoYsskjR1lgY4antpGseNN/1LR1+yi:lxISLvj25neoYkF1qDaV8/1LOyi","tlshash":"83a16d70b7d7fb8511348544d9bc366a2c289fdf2f735f51d4142de4c721ab29655802","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.553038Z","times_seen":21,"resource_available":false,"data":null}},"time_used":777,"timings":{"blocked":527,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/index/icon_b.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/index/icon_b.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1f797\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 93399\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5873436765592108982\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128919,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"479f58668efe097b46a8da92dd2e0dca","sha1":"d16863b19990e3730dc06c49f02b5ae1b6e7fee3","sha256":"4569963fd63f1733d4d2c7f8252717a612e110818eac2a87e6831a5e10ce3fd1","sha512":"8bb982363f460e932af8648122e386ab4baa6ee4d31fb9091f0cafa677804f6bdc9855a0ea62b11c78cd1b1cb3ee490af822279dcc0a03c65826e20228a8217b","ssdeep":"3072:V723qCZPzQ/2zLJEQ8KrA2KszgBREJvCn+trQcm:MhzKLqzgfQKnUrnm","tlshash":"6dc3027a6c593c290f20bb62d6df74c60f1c876347068c95ba2d3dc3119377acae6469","first_seen":"2023-06-07T12:23:37Z","last_seen":"2026-05-01T19:32:21.570348Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1174,"timings":{"blocked":893,"dns":0,"connect":0,"send":0,"wait":278,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otdho.z5bu9ne7.com/visitor.ashx?siteId=65003016","fqdn":"otdho.z5bu9ne7.com","domain":"z5bu9ne7.com","tld":"com"},"ip":{"addr":"3.33.255.186","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.m1nkk57l.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F9:FD:D6:B8:4E:0B:44:8E:28:48:75:D1:8B:6E:74:A7:DC:BD:45:E3","sha256":"C9:1A:1F:97:F8:66:C4:1B:A7:BE:A9:A0:C0:09:8A:63:66:A3:DC:F1:FF:69:58:2A:3F:DB:01:53:B9:B0:71:B7"}}},"request":{"raw":"POST /visitor.ashx?siteId=65003016 HTTP/1.1\r\nHost: otdho.z5bu9ne7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1215\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 10:58:27 GMT\r\ncontent-type: text/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://manbetxss.com:8989\r\ncontent-encoding: br\r\nset-cookie: visitorGuid_65003016=04c54454-a559-4b0a-94e2-1cc4c80467cc; expires=Wed, 06 Jul 3025 10:58:27 GMT; path=/; secure; samesite=none\r\nvary: Accept-Encoding\r\narrserver: chatserver2\r\np3p: CP=\"CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1343,"size_decoded":0,"mime_type":"text/json","magic":"JSON text data","md5":"420d624cba82db9da09f8621fcafc05a","sha1":"9bf74d85a975aa58357c8abea0c7d55dbe39ef6f","sha256":"6b59e823ca0037dbcc8ac06abf7d34526dbfa2256e18cdeadb91b08e4d973a48","sha512":"91c85b573cfc12cec9a3429228bc131e264b890e801cc6398586a7163ced723abf0463a6f258b5bf9d61aa7db45f99ac11ba2f57f73e3829634dfa751532fbba","ssdeep":"","tlshash":"662145e2112acc29c595054241a7b9238a0db1a3e8c46a14f4fdc37c50cf95e712775f","first_seen":"2026-03-05T10:59:01.487666Z","last_seen":"2026-03-05T10:59:01.487666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1466,"timings":{"blocked":627,"dns":0,"connect":1,"send":0,"wait":211,"receive":0,"ssl":624},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/bundle.7126c698.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/bundle.7126c698.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Thu, 05 Mar 2026 04:54:18 GMT\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\netag: W/\"694264e2-9819e\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: kiflDkmLLX4zzB9uMjUiU0Dc-WLo9BRVUJrO69qO8aKhUMM9UIaxeA==\r\nage: 21841\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":623006,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65422)","md5":"03585f467dd1043465e62024d84e8501","sha1":"1e5cf8a55c64abec323fd2af7e5823a22b4c18f0","sha256":"4cbd5c79ff097907e8a54d23154bef1b9b8db97a75ec78fb7f7fbc994e723353","sha512":"3c0bfd9bea584f9bc4acdac9815c499327a54479686c2b5e8189517433d9913de43dea480a34577ca551a0327e4d2cfd2271d6c598d4994b99119261805e46a4","ssdeep":"12288:nAQt366fCmXM7t36yfCNXYpnjhftWhS4V:ACfCZbfCSntwjV","tlshash":"68d41898f081b42856736161b2af360a7236a916ba4d4468f536c1f4bdf60cbd323fdd","first_seen":"2025-12-19T03:52:38.036277Z","last_seen":"2026-03-19T23:48:50.648715Z","times_seen":399,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_d/icon_a.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_d/icon_a.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-127a\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9272\r\nContent-Length: 3516\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4340369130510498710\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4730,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"412c350193d2e17653b84fdc67ee45d4","sha1":"e67d05076e1243db62c53cf24f0dbfe8b6101d21","sha256":"15dd3790dc4eaff5c49b587f727176868a31c628d2f2ddcf119cb3a4a93fdfd6","sha512":"5591728123b009783d826c279f16417fea883cb256ca5313e668e4f923d0ecdc3cdb4506c6b12e059a080e15d5713b114a2f3d3a58ac505df567c2dd2299b884","ssdeep":"96:jIMSUAeLFVNpEIr2LwGY1BnfImeThrC8bF2h6eFyGEVhu6neoO:jISLvEIr2L1Y1tIjTpC84Nf","tlshash":"08a19e7d3389f84754d10328f4e1afab2d320e69582a27dbc7364972dc526d843405ca","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.671267Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2153,"timings":{"blocked":1904,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/fserver/files/sportTeam/football/it12.png","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/it12.png HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=2b8dcfae973a524ce800a350c729cfda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\netag: \"5bed34c4-fdf\"\r\nexpires: Sun, 08 Mar 2026 10:58:21 GMT\r\nlast-modified: Thu, 15 Nov 2018 08:56:36 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 4063\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4063,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"89364ce1fd7101f097deb9b672be9f6d","sha1":"aa1f142cc608f935cefdaeedf52860ebf91fb7db","sha256":"c5f6326aabca1589967ef9bcd2b29a6ee1512da61f5f2ce7b30baf6a85c443f5","sha512":"8f3adf2f22227381853987a208e5f5b09826a20c8ccd36ed532bde1cf24a0c3a00f909c7128857a82e21f16dd70f0b2051819cc3d9c31c8bd94ebff6eeb01df5","ssdeep":"","tlshash":"48817b948abe09ea6171ae12820d970cf5d38aa8117b281d280f7946f098c7bf19f1e1","first_seen":"2023-09-15T01:36:07Z","last_seen":"2026-04-18T23:52:30.411632Z","times_seen":433,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/index/icon_c_hover.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/index/icon_c_hover.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-80f5\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 24849\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13282681748145996951\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33013,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"23c8aabad6dfe03842703ff509669e21","sha1":"b6096a2885ec392992c147f21e6ed75a9a30efab","sha256":"b5cfbff02dc703582072b1a85926ed2babd3cf542ec7e29a1cd0a61c4a44edfe","sha512":"f89cfb30f214548862ab8dccf6e81175337bc90ab7eef5ed091e24861b5d40190f92f4109a97db3243ee7d1de4c42baf3bd32891c19f31c8c690c0ff2e96892f","ssdeep":"768:mtbI7c7rbdM/7jq/HvHv2GtHwD4i2Htv9J/hDMqXsuB2enc:qbIw7roCZtHwtMDMqXsI2ec","tlshash":"a3e2f1548dbb93ce66a5d30ffdebc0a94f520d76bbcb558d41702093dc4eb426ac2898","first_seen":"2023-06-07T12:23:37Z","last_seen":"2026-05-01T19:32:21.674885Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1665,"timings":{"blocked":968,"dns":0,"connect":0,"send":0,"wait":696,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 27 Aug 2024 03:30:00 GMT\r\nEtag: \"66cd4838-3a09\"\r\nDate: Sat, 21 Feb 2026 09:52:01 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding, Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Tue, 24 Feb 2026 09:52:01 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 520\r\nContent-Length: 14857\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15133644315298322146\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14857,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14855), with no line terminators","md5":"4fe7dadf050dad2dcfd386d21b880281","sha1":"07e7feb8dc9309fe66d86d7a9e27f8efd32ab0bd","sha256":"aa891aafe8e98e1e15d81b2b116e6c3808d0bbbec56cd24818e2e7ac911877c9","sha512":"9da40e5132ece9fe346f27aa467b2496545c84197131c633e5b1ff1f641ece723440ec0289e82d7948b85bcd901b9e3eb6e36f8e0339ae05e4a32621e895accf","ssdeep":"384:yC+tJn9Dbvbf1P3QSBxDrdiewZnnoTW39if+04xSlR4nbiamdrjNfrzInGINYlor:NWJnlN3QSBxDMewZnnoTW39L0MSR4biK","tlshash":"a762954d3a9514bb4adf31b770ab204f767e8800852c91c4bdbca0d166b5ee072e7e6d","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T19:03:26.50851Z","times_seen":17498,"resource_available":true,"data":null}},"time_used":2968,"timings":{"blocked":2693,"dns":0,"connect":0,"send":0,"wait":274,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nEtag: \"5d848f4f-1ad7\"\r\nDate: Tue, 03 Feb 2026 09:42:17 GMT\r\nContent-Type: image/jpeg\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:17 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13089\r\nContent-Length: 6871\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6595112001092816780\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6871,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 168x168, components 3","md5":"99be4bfe275809d4e436b77c991b1381","sha1":"54eadee77394eb62ccf377ae68d9f49acb5b6785","sha256":"4ca35131972acdf420b94f0d64a5a0f504eb5a7b0e6fb7b8b467916a12aae37d","sha512":"452a79b02619ed5c1e4f81fc5a4a209cb8a11d03aadb1841ae9be18fbca088652cdb54340329c1bf57771abfb02ffed4bf75b61f4df96866b7f2358c36ae75a3","ssdeep":"192:p7FikLUR+6X7MCy5nSb1jSG99DX8yclWGo2yscY8:pfA3+gSGjX25+Y8","tlshash":"4ae18e26da8bdb85c4a4f2713f7d881a5551da1a5bd3f02160f8c41b3c9327c15e7a8f","first_seen":"2023-04-30T20:28:22Z","last_seen":"2026-06-07T07:30:11.517692Z","times_seen":17417,"resource_available":false,"data":null}},"time_used":3334,"timings":{"blocked":3022,"dns":0,"connect":0,"send":0,"wait":311,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/vendor.4f844090.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/vendor.4f844090.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Thu, 05 Mar 2026 09:31:13 GMT\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\netag: W/\"694264e2-26906\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: DWiEiBfCe6aFyS1J2CaaB2o0hZXyVQY9IN1d_WDk-8J9brV23LoiHA==\r\nage: 5226\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":157958,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65419)","md5":"1550da77b83ea7f92fa72c28654b0b07","sha1":"bdf997b0f858feb25fe28e9aedb9ac9ab199f143","sha256":"eb4f74cbc5b25824f7f0bb24042143a6495404ce6d2316886ff2c5887e52c020","sha512":"0d4ec259e0a05aa51ad1d12030c8eb7a40bfb5dfb74c2285389d0461e1dc640ddf4b77d58628f9a1cd9a92ed9d764bd90dfb1fafb85235a2c270906ce606fc2e","ssdeep":"3072:JlPm6jZ+uUcYoazxkXfDirssXrs1zFzToZpGYPfKX9dT3ZFUxxk57AT6m/FA:mzuv+pIzMvD6UFA","tlshash":"32f31bca32957c5552aa31e2887f090ef33a1d66348cd068f6a5f5d23cb540e9277f78","first_seen":"2025-12-19T03:52:38.075217Z","last_seen":"2026-03-19T23:48:50.690511Z","times_seen":399,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_b.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_b.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1797\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 4503\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4668570816126984216\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6039,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"bb7b7c7884f824df29db8da126ecf243","sha1":"153f6485bcc46d0baa3b68491b9619ae8f45ba09","sha256":"c613cdc294a9391026085e884dde1d946eb047533b4484f79a7a090591bf8f4c","sha512":"5452904a53a2724672517fdeeab948e0ae45c72c17627c16ec85cb2aa7b13146d3066d59b162c0e7235ee7f25381dc18a69be32677f29a1e65c019f4b31c4b5c","ssdeep":"96:rIMSUAeLFVNpzjCETwlYrpntXAh3JtPNJOsJsRBPOsmQo9HkhMixAMqRcDYu1OiT:rISLvzjCQwlaQ1PNJCg9H+MAAMqRcj1b","tlshash":"d6c17e721a9b6b1f6940895c7187262c3910ab3714537bcf91e86afc476e7b513d0cc8","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.696989Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1784,"timings":{"blocked":1248,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otdho.z5bu9ne7.com/visitor.ashx?siteId=65003016","fqdn":"otdho.z5bu9ne7.com","domain":"z5bu9ne7.com","tld":"com"},"ip":{"addr":"3.33.255.186","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.m1nkk57l.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F9:FD:D6:B8:4E:0B:44:8E:28:48:75:D1:8B:6E:74:A7:DC:BD:45:E3","sha256":"C9:1A:1F:97:F8:66:C4:1B:A7:BE:A9:A0:C0:09:8A:63:66:A3:DC:F1:FF:69:58:2A:3F:DB:01:53:B9:B0:71:B7"}}},"request":{"raw":"POST /visitor.ashx?siteId=65003016 HTTP/1.1\r\nHost: otdho.z5bu9ne7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 69\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"[{\"type\":\"getConfig\",\"chatVersion\":\"\",\"ssoSessionToken\":null,\"id\":1}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 10:58:20 GMT\r\ncontent-type: text/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://manbetxss.com:8989\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\narrserver: chatserver2\r\np3p: CP=\"CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1318,"size_decoded":0,"mime_type":"text/json","magic":"JSON text data","md5":"fb9f89454235d4de41154a366d4fc9fe","sha1":"40e20833379653ce57d9ec1b499a78d298b23a86","sha256":"20c6a03a6d43d8eb7049efdbe495ec40fc2f80d665114ca816869738dd32328d","sha512":"f189a2564c4518ba9586e71322eb329f183f99f280b047f38faa66d22d994e0cf2274ceee5b1ce337f7302d687dff52c174d3d8604f583b9f6ae97fa5acd5cf3","ssdeep":"","tlshash":"9d21fdef6085907d8b264662e32e771c8a3eab1f27007884f66c8e1e35d35ae0565257","first_seen":"2026-01-30T17:56:34.465201Z","last_seen":"2026-04-09T10:59:41.828169Z","times_seen":71,"resource_available":false,"data":null}},"time_used":913,"timings":{"blocked":0,"dns":61,"connect":1,"send":0,"wait":212,"receive":0,"ssl":639},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/fserver/files/gb/1228/sportTeam/5/1579969440448.png","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /fserver/files/gb/1228/sportTeam/5/1579969440448.png HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=2b8dcfae973a524ce800a350c729cfda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Thu, 05 Mar 2026 10:58:22 GMT\r\netag: \"5e2c6ba0-d02\"\r\nexpires: Sun, 08 Mar 2026 10:58:22 GMT\r\nlast-modified: Sat, 25 Jan 2020 16:24:00 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 3330\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"a85a2a71298deb399029d6ce59968f2a","sha1":"b69e48f661c86259df396dfc37025ffe48100e55","sha256":"292e22e4002f6f73102bddad543c5b275abfe278571af324006ec08273a02169","sha512":"768291554c7a17d092bcdc83428b628041f0148caa8ccb932623963e9d474a7701604123a02dc41f28ddd285979e721830474529c824411432f84de33b40fc2b","ssdeep":"","tlshash":"1d614af54168c484ee741a74b24b1df453b9b6aeeb838713a12dfb2200b05cd960621f","first_seen":"2023-05-29T03:23:51Z","last_seen":"2026-03-05T11:01:01.088704Z","times_seen":270,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/index-bg.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/index-bg.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-61980\"\r\nDate: Tue, 03 Feb 2026 09:58:39 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:39 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9277\r\nContent-Length: 257113\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3457262429967626644\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":399744,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b38d93a699624f0f111cb616e4c8cb5e","sha1":"0716b7f965db10e6788be0a6ce72b37e0706e483","sha256":"99880d5a002e9b30b32efc9cd5fed82c70bfaae55d96dbabfbc5cc14781480d3","sha512":"e55022ca1fd21f729c255653924442700b2efab2cb2e58f156bca9b340bba1bcbc02b815a8243ac5f181bc338ef9462c0adf1fde24ac84c5cbe472339b2193cf","ssdeep":"6144:yK1xFmvXcNTOzLszov8HrHV1GHdOn3wovrLbU1G5AyK74t29z210rlvCfIpCq2ya:HDFmvcT8+rekjvPo1GtKEtojxgfJUW","tlshash":"d98412302ced6b92d73d0115d5663f7a8f742bb30481944ab0f96cc659eeb81ce1a87e","first_seen":"2023-06-07T12:23:37Z","last_seen":"2026-05-01T19:32:21.651034Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1452,"timings":{"blocked":1196,"dns":0,"connect":0,"send":0,"wait":248,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_a.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_a.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-15cd\"\r\nDate: Tue, 03 Feb 2026 09:58:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:36 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 4163\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 345735517984456893\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5581,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ebfed11ee4e3c1818de7c649273385e3","sha1":"fb7d84b4df62a8544c65b894e3070d51c1c41ebc","sha256":"0ba825a75293cb473dafe7c366001e03bb19aa8df6b545a4daa2b07b8291ca72","sha512":"759341804c3213587bce49a82b1b5b54776dd68e9234bb7eac2eb4ef7478f4cf2f01b2045eeee188b35fefaba1322e55821553e2ae9b2915798519109907cc48","ssdeep":"96:eIMSUAeLFVNpDR0P35cZwENadRWj4o8R5RBeI1Wnf2Q98eQZEfhf+w5+GOuuwQKM:eISLvDR0XTMj475nhWvrQY5WH","tlshash":"c0b19e72a85f37815020034865a8b59c77753cd6de462cdec12d909fa682ef8ade20fe","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.649027Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1193,"timings":{"blocked":883,"dns":0,"connect":0,"send":0,"wait":307,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_a.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_a.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-cc7\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9272\r\nContent-Length: 2407\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15653838790929505424\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3271,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8f37b28588f1718493d1d51b5cc50aa1","sha1":"92d2f8b8facecaeb525b3ced7537b50e9cc4faba","sha256":"8bf0d3e011cf350b24c4b27c84e27eb65ba9fba84107d0da60cd528c9e3d43e4","sha512":"7e2f647e7b78c32c9fadb632bf237bbae1568f3e62921a11afbaaf66f41891531b470d4902f2c4b2ac91ffbe7f60a48794660dc1a8a16239c504c08ea7fd458b","ssdeep":"","tlshash":"79612b3ebeab771e586042accfbf79157c264e86d4d81a6ddcea21564a4176003c1588","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.618956Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2198,"timings":{"blocked":1954,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/icon-shake.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/icon-shake.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nEtag: \"63b91f87-3e9\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9273\r\nContent-Length: 1001\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15395879222939861940\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1001,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7c70b2bb5e1a7073a2e355248c15fdd8","sha1":"11afb6d25c950cdc0fd9f6836b837750c95017d8","sha256":"ed3fbde5ab8d9f245f731d1b482e6fd8a8bc31d01e127bab1ad8d8e5a4279aff","sha512":"83a38dd8b09cdbdd2855e5e4f44d70c869206831051cfca883161cd700233b447d6cbecd36d21dcc0dc6831367f28014f51c3cd8d78020c73cee6c5260558c34","ssdeep":"","tlshash":"f71186b01f11990e06b219e03969f49b1c861d67520ae934af0af0ca05c9066b2d4781","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.70876Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2484,"timings":{"blocked":2214,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_c.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_c.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1b47\"\r\nDate: Tue, 03 Feb 2026 09:58:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:36 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 6\r\nContent-Length: 5227\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11300340804831822845\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6983,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"15f9ca700465107d225012357e0c08d9","sha1":"ac0df20230fca9342be053fd02546016aca320da","sha256":"fb51b2aa2488483a6bed16f8ffb6de769849222d252f0315818f86f59e50664a","sha512":"a5c4175a3e5e94bec76dacd746c46e34f7e89feaf83ea02f182762a6b82c2af542b8b990a7212a910c781c43e10e4b25550de4a1ea4b5562b7bf29495bdbb250","ssdeep":"192:0ISLvWsu8MkxTWA2tse4p1wkuXn7nGYiju3sfezTUs:0JLHu8MvDtse4puzGfOoezR","tlshash":"57e17d3dd761ab1170bac3d864af264778ba70af2bda2991005837f8a014971e3761df","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.673162Z","times_seen":21,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_b.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_b.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-da2\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 2569\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 775941575492967420\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3490,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"af93eefcb52c7fb06394f09f39c18c5a","sha1":"6d3e6b06cc9962e2f9f4ec62a44721f67527903d","sha256":"5773c02722731252ba119a399b1538e0b38fa05333b613bf3a2315c3bdf70761","sha512":"46770d0b6b734cd7a771fcb57c9cdcd35f10fc055fafa919aeb8c9b6068f8de7ac6bdd6d8c56de7db4f90ace87f839f69a2b1acf64eddb942e14e89353444eaa","ssdeep":"","tlshash":"26717e3e4a65395e30b18952a5fe77d22d350d2d01be5e7be9251bef06353914040c96","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.569693Z","times_seen":21,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":505,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/websocket/PopUp.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/PopUp.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 21 Apr 2022 04:30:12 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6260ddd4-828\"\r\nDate: Mon, 09 Feb 2026 00:01:52 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 12 Feb 2026 00:01:52 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9277\r\nContent-Length: 797\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12171750669403817819\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2088,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"07864ad2e2759d53f8f2f14dd4295bd9","sha1":"95144219e2eb702c4c4a707c3622b086876cf41c","sha256":"871bf30791bb89605b61cea815c3786246274b65ede3b8a8b8c2dd9244cfa89d","sha512":"f469d0f23c75e918d55e076d72481fca7043ac5eff9025aaac1f26860d080e4fc3c5d28f8f9ee1dae80719aca2b83f39ea82a129c221980bd7d63c212bacc119","ssdeep":"","tlshash":"9041ae54baf359a12c9b71f3aaaf30413160f2479505ed017d0cb9945f1d228b2cf7e9","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.504581Z","times_seen":17518,"resource_available":true,"data":null}},"time_used":2417,"timings":{"blocked":2155,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_c.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_c.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1381\"\r\nDate: Tue, 03 Mar 2026 09:06:31 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 09:06:31 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9273\r\nContent-Length: 3718\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13573479853227717416\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4993,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4dcbc3fb9e9311d563536b9b1083a070","sha1":"a4c63959a46cd404de7ba8919a027b2ffeb36cef","sha256":"a17d4827a223c992203bff42865137cff1c4585914e892bb4879c14253b065cf","sha512":"a692690d200bd3b64b6c129350e9088723fc9be0f217193bdfcff07a31570ac7c756defbb3173a58be27cc02c1756fbb9faf15304f09f732d88089aad20af586","ssdeep":"96:lxIMSUAeLFVNpj1k51Ud0eoYsskjR1lgY4antpGseNN/1LR1+yi:lxISLvj25neoYkF1qDaV8/1LOyi","tlshash":"83a16d70b7d7fb8511348544d9bc366a2c289fdf2f735f51d4142de4c721ab29655802","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.553038Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2401,"timings":{"blocked":2150,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/fserver/files/sportTeam/football/es11.png","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/es11.png HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=2b8dcfae973a524ce800a350c729cfda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\netag: \"5bed35cc-1595\"\r\nexpires: Sun, 08 Mar 2026 10:58:21 GMT\r\nlast-modified: Thu, 15 Nov 2018 09:01:00 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 5525\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"5241d88e391cdb90ae5fc1b5ef1d9a63","sha1":"b937d841194895474aa2ee079916065c7b6a9a85","sha256":"ff45ff711ecbdb7b10012342d24492de077a0b4c991dafd971b0ffb989efded6","sha512":"f5ba47154b4b8b875c6e0a2612aa532fba16ac4bfdf9b9c1cf0f1a6f4cafd382204a33ce4166ab16714fb2e7ce49f890486e77337ab55f5878c67440a8e96723","ssdeep":"96:Bfrgs9/yhr3qwu0rYYsuJeV7GAws2HUEdb3fzFOJUsGs5dxqi6PPNH2pxo:BfrT/03Hx5Jd150uvFkh/dAlVH2o","tlshash":"5eb16c3d7f58e2316f7cca98e4c000924a4fb099a13ff720222d80a2a5f6f8a35b5600","first_seen":"2023-05-04T04:29:49Z","last_seen":"2026-03-05T11:01:01.11072Z","times_seen":85,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_b.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_b.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1851\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 6\r\nContent-Length: 4654\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16345365933165725646\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5e063b8887c2a7c302b9d1032191cab5","sha1":"596658a849bb1fe5d59ede1feef18db95a9719ad","sha256":"5649e6912a883ed01252d86c8cc7dea5ce1f70b376582bd71a18ef957fbb109b","sha512":"55f9f95b4c4ee0c11ebd7467111a8006fc3b3fe8ab1c1e986e613a092e595e153bf63fedb8e40cc77af82f8760b8553103ce10d412865265a7307099fec1d1e8","ssdeep":"96:MwIMSUAeLFVNp57J8UoavFBuUYlPSM2wTaCXHCN3waCs7zC8HhthuiyFhFXKi:jISLv5aauUjyXi1wafK8nkiQn6i","tlshash":"2fd19e373d526d075461c3ef42fa8cd72c83fc2b17eb725954592ace421e6602549ec9","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.649685Z","times_seen":21,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/layer.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/layer.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-55f6\"\r\nDate: Tue, 03 Feb 2026 09:42:17 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding, Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:17 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2398\r\nContent-Length: 7599\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2386413778414194730\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22006,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21910)","md5":"cb96339625e9d456e32f86cdb3c7a7a1","sha1":"1301165c58bbb13c542cba493b7ab5774e87e31f","sha256":"17fb047ba6828fcbdf2ca226fa4594cfded2b2fdfeaff89a5bd81c7cf0359919","sha512":"53083bf4d6d450b1e9402c3f3dc40fb3434a27d47fbabee51f4ce1d3577f2a0aabe90cf5f6dfc22830a3878ec7552a6bf6bff605c82a4f832c79f34f7657ccef","ssdeep":"384:r1dCih92A3DgrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:r1YiV3D+WtXItqF13k8","tlshash":"6aa2b76a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.489421Z","times_seen":17440,"resource_available":true,"data":null}},"time_used":2702,"timings":{"blocked":2409,"dns":0,"connect":0,"send":0,"wait":292,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/vendor.4f844090.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/vendor.4f844090.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Thu, 05 Mar 2026 09:31:13 GMT\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\netag: W/\"694264e2-26906\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: DYUhPk_s5UjmBDsI5ZEvzhoCG8NAmzqRig14Sfc_GzM24F51x-_o_w==\r\nage: 5226\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157958,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65419)","md5":"1550da77b83ea7f92fa72c28654b0b07","sha1":"bdf997b0f858feb25fe28e9aedb9ac9ab199f143","sha256":"eb4f74cbc5b25824f7f0bb24042143a6495404ce6d2316886ff2c5887e52c020","sha512":"0d4ec259e0a05aa51ad1d12030c8eb7a40bfb5dfb74c2285389d0461e1dc640ddf4b77d58628f9a1cd9a92ed9d764bd90dfb1fafb85235a2c270906ce606fc2e","ssdeep":"3072:JlPm6jZ+uUcYoazxkXfDirssXrs1zFzToZpGYPfKX9dT3ZFUxxk57AT6m/FA:mzuv+pIzMvD6UFA","tlshash":"32f31bca32957c5552aa31e2887f090ef33a1d66348cd068f6a5f5d23cb540e9277f78","first_seen":"2025-12-19T03:52:38.075217Z","last_seen":"2026-03-19T23:48:50.690511Z","times_seen":399,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/partner/partner-hongtu-goldGradient.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-goldGradient.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1e5af\"\r\nDate: Tue, 03 Feb 2026 09:42:22 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:22 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9995\r\nContent-Length: 94483\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5002533662099047521\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":124335,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ce2a68b63bdc53b665753c51c725aa67","sha1":"bf0e7f53993078efbf6fd58e0086140aa483bd0b","sha256":"1746360cb57da17f40d53702373975c6a089bdbc3b30ad614a2aee3861e6ee69","sha512":"ce5aee0c48488099c795f67dc7f68f03fdd4554a66b03ef5c259f5b7d8edaa69a2d142a898468a54e9e4795e5fea843ff5e926a06d4233b26d2561ca6efb5468","ssdeep":"3072:SlBd9XIEDaQchMCJ1v1kKAr1p7IQWvMsy:Sh9XRNcGCJtuNrv7e3y","tlshash":"f5c312445f984f9af1eee8465005ed5cbc509192efef6df027d3f4a78888c818396b29","first_seen":"2025-09-06T20:06:14.226062Z","last_seen":"2026-04-17T08:59:04.359738Z","times_seen":1771,"resource_available":false,"data":null}},"time_used":2606,"timings":{"blocked":2358,"dns":0,"connect":0,"send":0,"wait":245,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nEtag: \"68b69275-1beff\"\r\nDate: Fri, 06 Feb 2026 06:23:31 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 06:23:31 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 5627\r\nContent-Length: 114431\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12910215202376505823\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114431,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"13705bb454fa93a337d360fde95d32ed","sha1":"f17931976273af97665c359e14c5d7b673ded90b","sha256":"221a4adff18935e8dd8d421dd0dfb431bab972377ff4ead01e00cdc9dbf73127","sha512":"fc3c18262e7afc15b4716e6ed6869f20c27749dc181e010736e5314d0cc96d33826337eb3198e8425dbf01766d7c7cd2d85ce3cf594c4509106540464dda76a7","ssdeep":"3072:d1tyThaOfU3ozO51gip4i02XfacJ7TznFNnOOa:d1tyT8cUM5hcRnFVW","tlshash":"20b312a0dce07db423bb950ca3bc9f186243145f03a6269321b3f5430d627a4a6fd772","first_seen":"2025-09-18T16:22:49.418873Z","last_seen":"2026-04-17T04:44:35.216553Z","times_seen":1726,"resource_available":false,"data":null}},"time_used":2681,"timings":{"blocked":2375,"dns":0,"connect":0,"send":0,"wait":303,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/fserver/files/gb/752/carousel/10293/1752547897793.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:23.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/752/carousel/10293/1752547897793.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 15 Jul 2025 02:51:37 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6875c239-cf349\"\r\nDate: Tue, 03 Feb 2026 09:58:20 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 09:58:20 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9279\r\nContent-Length: 635321\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5442049703735951033\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848713,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fe8e52486c24241ad4e406b966392386","sha1":"acd60caaf2c3af7c7b712240467ff5569a2f7eb0","sha256":"db13f2429ba083f3916e364813db0b30d0dcb239f3d0aa9d36cdb4dcd549f1f8","sha512":"6432db08aaa1ecad5a6869d9c0ebb9d6ab70297afbb080c7c6815d51ba1e064c488c1b09944fb619af4746f99afb30b1515f29a05ad0bd1ef26abb11e4be54b6","ssdeep":"24576:MYEXAMQScmg/2quifQdXeEg6FDPg/zbfRICQqm:0DQSfE2qe8fRYv","tlshash":"a90523354e0ec9245f918a15b28b6f613ea01fc6d985e08234d4bfe731ebdd05ba684f","first_seen":"2025-08-19T13:19:48.94574Z","last_seen":"2026-05-01T19:32:21.569072Z","times_seen":13,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":403,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_b.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_b.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1ce9\"\r\nDate: Wed, 04 Mar 2026 04:18:32 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 04:18:32 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 5542\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15203687155917293800\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7401,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e14e779ab74cc1be6a17c3c5c09f04ff","sha1":"59fa991066abdd49308a8dee6e9c3f56048e9290","sha256":"623396127aa0846adc94f4c66aadaa4eecea98a67e9e202cf169063c833e95f2","sha512":"16f0a1781eefa7f834f921cca72ba51c8223abda04322fa4bad7204d54aa4d31e36ad66c1e7ac075357359b478b5bf22957bef91e3f4cf4982edb5e983677da7","ssdeep":"192:rISLv6/iVklpI3GbxJCwwuZLV3cFV4irTA9NkV8PNnHWRUX7BVstX:rJLi/iVklyU7RT3cFJQ3w8BPX73C","tlshash":"2ae1af3c6a3ff73a900c197c5e8dfb97f85c228c2dcb6d6d447b32942911e788261064","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.580732Z","times_seen":21,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/themes/gui-base.css","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-base.css HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 25 Feb 2026 06:51:20 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"699e9be8-146ad\"\r\nDate: Wed, 04 Mar 2026 02:46:11 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 02:46:11 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 5187\r\nContent-Length: 17173\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5628948409511944627\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83629,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12023)","md5":"ae436617c02061eb715fce1f6e4d84ba","sha1":"d29e23c56a6972ed8c139be8fd55022e8dc79dc2","sha256":"95be5699e27ae8ba00031ebaad84c414dbe6ab48f6445007513e072c9243eaae","sha512":"614e0041902efc437f9ef9ab63f0ee9e7d1236e0a5d811013dc75509c0669ef44b24ffefec0cf367ed241b6615b506b27a951cc17f168e7ff97f09b9564c4137","ssdeep":"1536:hh/EEJVfpLdXYSN4H1Y7B/Daf4ZxnVXCg9bI:VXYSNE+RVXW","tlshash":"0a8385b2e15824e63373c856a381fbda2554b122c5134efdf89f655c8bc738612a2f6c","first_seen":"2026-03-02T15:35:34.435383Z","last_seen":"2026-04-17T08:01:36.591141Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":3611,"timings":{"blocked":1674,"dns":1044,"connect":260,"send":0,"wait":257,"receive":1,"ssl":373},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/jquery/jquery.nicescroll.min.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery.nicescroll.min.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-fc8b\"\r\nDate: Wed, 18 Feb 2026 18:35:50 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 21 Feb 2026 18:35:50 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 520\r\nContent-Length: 17446\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 917446632923207693\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64651,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64577)","md5":"b5bc8cd626b389bde727a91e6ce79436","sha1":"3df6c39300ac286cf596b3bda273cb39ff825429","sha256":"a1eb48eeb3b3f2ba41940d3041464f0b386b7a7c4a8acb42f3017e691f4b116e","sha512":"2c1dde58ce83d9b716919dfc42602aef3022be012b3f92e61b17b674303ecbf0b9d308064b6d6c2443cf3e3dfd36bfb332eab62e64b56bef0be801e6f4610f12","ssdeep":"768:CwJl9VwAdGuMbJVAOi9ee9RjOEe1sdMv5rjITry:Cxb7AdRjOEKhHay","tlshash":"9553a7cd7522346b05de5235d18b4b4a623a9857730b90e4762c8cf46d29bbaf223f7c","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T19:03:26.499705Z","times_seen":17628,"resource_available":true,"data":null}},"time_used":2866,"timings":{"blocked":2539,"dns":0,"connect":0,"send":0,"wait":297,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/themes/hb/css/pc.css","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/hb/css/pc.css HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-b5d\"\r\nDate: Tue, 03 Feb 2026 09:42:16 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding, Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:16 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2055\r\nContent-Length: 911\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8587894460658394457\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2909,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1da71520b7a0a61526a8fa8d0feb40d1","sha1":"ba1bf69dad8783563328054cae58ccabf1b00829","sha256":"5eb4d895bcb33061cda238c8ff4985ede69a866819b980c732cf3802ec101e8d","sha512":"d1cb92160523c231c4942f27c018bd3b30f89fc60153e23eb0a49d0696c896b0904ebe5db7cb97a0686f656d04a58f3ccf8fc0f09f2be703fa8400bd3270dfa8","ssdeep":"","tlshash":"d451dd305a02b1aaf42ffa677420874c2537004373169b3e72fd7ad1cfca9696136ad4","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.485758Z","times_seen":17228,"resource_available":false,"data":null}},"time_used":3176,"timings":{"blocked":2852,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 05 Oct 2022 09:40:30 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"633d510e-7fd7\"\r\nDate: Wed, 04 Mar 2026 23:46:48 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 23:46:48 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 1836\r\nContent-Length: 5207\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6164815159272908806\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (801)","md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.487698Z","times_seen":17749,"resource_available":true,"data":null}},"time_used":2980,"timings":{"blocked":2683,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/partner/partner-hongtu-gray.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-gray.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-199fb\"\r\nDate: Tue, 03 Feb 2026 09:42:22 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:22 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 11190\r\nContent-Length: 79652\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4801738155986345901\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104955,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Apple HFS Plus version 12135 data (spared blocks) last mounted by: 'GYCw', created: Thu Nov 30 10:34:46 2084, last modified: Thu Sep  4 23:18:47 2098, block size: 1467044454, number of blocks: 729362515, free blocks: 1497459512","md5":"c74ef17cb37fbfb0a1c949597470e977","sha1":"34c6ba958b6527c7a9eb35a4d64233da66e772c7","sha256":"f3fafe4c402edc11f26d8170dd5ef6da07e1d538ce471b39fd0769803439d2db","sha512":"493dc789121a373e46f86420affcd800691d47a146c19852599e9896ca521c3fd42a89a02932fbf69d4d3040734cc0ec4f0c3afc86064ec54668397955a48bbf","ssdeep":"1536:2qC8ZeKIScoUhq8lzPJt7W54AH4XmYho/1bxXoYW5qyx+zn8tnngf:2xi0hJzRthZWT9BoKysin8","tlshash":"c9a3023ccb433a116ad267a51fb22deda740e6cb555e03e785d222c615963ceef318e0","first_seen":"2025-09-07T00:50:47.660386Z","last_seen":"2026-04-17T08:59:04.26396Z","times_seen":1764,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/mobile-api/v5/origin/getThirdParam.html","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /mobile-api/v5/origin/getThirdParam.html HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=251410696cadec6a5b6c74aa4706df12\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: mobile\r\nuuid: 00752-01-00000000-1772708301ca13\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 86\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"9ac55fe189e4f53f37156e563e0f542e","sha1":"18b13b1360ce9fbd973e046d2652be38d58a15e0","sha256":"d7e02321006e1520d4c3e8d26428462419388e022cc89f3c974d0b87ad83af7b","sha512":"45b140d1bb3f3f06ff883448128956edda4d8ae0820dbb6b10f13860896cd611921dadb5b11b8d1577f22a80aefdfdbf8a2d54f6076b1e05f69d262df93b94f0","ssdeep":"","tlshash":"12b012816118adb39f0317e120ec380142fc11d180d48408dc5c8e5847948d7a202933","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.50515Z","times_seen":15881,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_e.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_e.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1098\"\r\nDate: Tue, 03 Feb 2026 09:58:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:36 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 3075\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10357484030279686350\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4248,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"fefd3c9b92160c8c8408fe4d6652280c","sha1":"70facfb9104169eeaf9ddaeea05a77bdf368715e","sha256":"d67dc60f79d3949b3ed80891d561c6d1b50542020e775e6e9d736a573384c7c9","sha512":"53bcc1f18c65b777e68670117340c54a3a579a8f4dc0d699aedb9b99bbe96ed540af5b721cb71d218181803390ea2bebfbcea305dbee1866c7c6219d240f0225","ssdeep":"96:uIMSUAeW3hSo+a2sR5Op65j7mUdjax9vnb6b3EpFnqHPBN++n742:uISW3hnTu6539KnWYp6PX+h2","tlshash":"18915a7b7c27230f48a0ce28a25652723cba878ea50d7c56146b3876959bff000c1ced","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.55751Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1577,"timings":{"blocked":611,"dns":1,"connect":304,"send":0,"wait":336,"receive":8,"ssl":315},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_d.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_d.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1a44\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 5031\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8781529858948829789\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6724,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"12e653334afadd703223f2a61f85ee51","sha1":"c0405983e3cd5a71627cbbd47c5207ba4eeb1486","sha256":"1cb10519ea40075d1451b5837ff7b927ed8aa5ee0a010e67824d2493fb346cb4","sha512":"31d67e9fa52b3b88db21d21418ca4d678e706853035d818979b4f0a928ec41f95ce88dd7dc7a079ad4ae48d5366933971c4e0f9e9559669cdb8e2dd0c9feada8","ssdeep":"192:EISLv5BUWrfJGA1A+vbUsi73Q/BTpZlJ60eYzKbi:EJLhBUqJD1J673cpjc0Zf","tlshash":"6dd19e7d0d6adc8946b7d29e2a8abb6a3d56000f15132ed3cd9e14cf634c3f19a50c10","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.628417Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1304,"timings":{"blocked":1037,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-441f4\"\r\nDate: Tue, 03 Feb 2026 09:58:09 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:09 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 1\r\nContent-Length: 210664\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15378692873123594389\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":279028,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4e41dd50bd857b9d65d4b6a6a873070f","sha1":"db3669c579873b0e27dc4e3503a3e92ac0eb93c2","sha256":"7da30473066d2efb9997bc6325969c86056befa4a0449508ec661473f05ce818","sha512":"179b6210c8ce16ca7d733c8fa65cdbcd44a3d4947e8a7d3d6e4d7249fd1c2e3bf2e435d2ab67cc720b5ad8a474a666f321fa71004e0d25e771c248e4646abe45","ssdeep":"6144:Hl0mutWDJHj0wy24GQm+wr9Y0hFwOKScYzWEjCO9aVZ/Fzlu4/k/Ixyjs3ctDu4u:HSmutWD40r+0hFpKSciuV1z/EfjsunpI","tlshash":"035412358e3fbe5e5c737937b4008a654a5047a79348d63abb4de64325b6e812cfd009","first_seen":"2025-09-27T13:51:17.760144Z","last_seen":"2026-04-05T07:52:11.17405Z","times_seen":35,"resource_available":false,"data":null}},"time_used":3042,"timings":{"blocked":2768,"dns":0,"connect":0,"send":0,"wait":268,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/register/getRegisterData.html?c=","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /register/getRegisterData.html?c= HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=44d17259ab44b1b54887077d522d7137\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 00752-01-00000000-1772708301fa5a\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 89\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":110,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"742d0d0ce9e7962da0a059d68eab7735","sha1":"6bacb103d26be2865511905b02a2b58fe957407f","sha256":"4a167ed04b9f298430c1f5bdc5878f5a5e876cd19f40f51846b75d12820709fb","sha512":"cb0e7944c51e6e8f824525b2072f7d9da4c5603e3dbe55202fc3854a6c42c1d0369d442a7ad02599f51d77f8fd2b6005dbc18b98d3201cf8cd19688ceb3e72f3","ssdeep":"","tlshash":"3eb012181075c8b9dc3fd60cad07b5ca017dd32971c39e968bd9ee5892841d84050757","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-28T12:49:52.709435Z","times_seen":45,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_d/icon_a.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_d/icon_a.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-127a\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 3516\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 464687745430468395\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4730,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"412c350193d2e17653b84fdc67ee45d4","sha1":"e67d05076e1243db62c53cf24f0dbfe8b6101d21","sha256":"15dd3790dc4eaff5c49b587f727176868a31c628d2f2ddcf119cb3a4a93fdfd6","sha512":"5591728123b009783d826c279f16417fea883cb256ca5313e668e4f923d0ecdc3cdb4506c6b12e059a080e15d5713b114a2f3d3a58ac505df567c2dd2299b884","ssdeep":"96:jIMSUAeLFVNpEIr2LwGY1BnfImeThrC8bF2h6eFyGEVhu6neoO:jISLvEIr2L1Y1tIjTpC84Nf","tlshash":"08a19e7d3389f84754d10328f4e1afab2d320e69582a27dbc7364972dc526d843405ca","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.671267Z","times_seen":21,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":476,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T10:58:14.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 05 Mar 2026 10:58:15 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-html-cache: HIT-3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":557421,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3904)","md5":"34740897d157de8d0e82030c05cdf8f8","sha1":"a780f6b43b07d6d02105b50026e040d8aad30963","sha256":"8fdf4518e4535832c3d50c4da9ebfaaea44e3d9fec800706f1772c8f79322a09","sha512":"84980a34f00a6b4ad317115209f74cdfa01dcfffd29e1c95efe3cf851b7bb8f68caefaf4b90f8c374f6c1a41e846211ae7d67409c41d20d38ad747d20e4f820d","ssdeep":"6144:3Wi7dJAFuGan0vsD9MOwCh0BuGamjhDeS2OMcVrIy:GinAFudn0vsoChAyU","tlshash":"eec42821baf6136626b7b0b94e7e230434359047ec0acd047d5e26d8af85e65b373b9c","first_seen":"2026-03-05T10:59:01.538193Z","last_seen":"2026-03-05T10:59:01.538193Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":505,"dns":0,"connect":248,"send":0,"wait":264,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_a.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_a.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1f14\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 5943\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9490154747053356549\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7956,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"12fee171e4e939a63539987138f639a9","sha1":"c032e62e1be54e78fa3593a65375b3d7e94c25f8","sha256":"8f3494eb3d923322216594a0da1fec66e0af939dfe389ddcf3adfa89583c397a","sha512":"2c0dc07d03eec7bb1ebe2d3ca815d8402e093d115c617307cc4019e64b82ffbedea19d8d72e45b2f6365bec54024aa8ceb5c346545bb6081dc2394b3523b0596","ssdeep":"192:KISLvfrQfHA81i7wIm0e3tX8ZKtROqR7fuEOcGYqp1Iy5RKs:KJLHrQfVc7c04fDkxYq4yLp","tlshash":"e8f1af2d87e4a92f5cb46f2500167a3138ba4a0afdcd56ef50be0175dcb66e840d336a","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.615879Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1475,"timings":{"blocked":1176,"dns":0,"connect":0,"send":0,"wait":298,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_c.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_c.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-17bb\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 4538\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1330671115611288921\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6075,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"6fd781178801655c7e8399929258b351","sha1":"b090ea1a0de1d27f3fac776621f715493e87ddac","sha256":"41cc3ebfdabc18e26e77b18bc4dae9de5b50666d1c62162744c499945e2fb70f","sha512":"008b2ca3a5d6347fc77bddf12bb265f40faa796d455e89ef121174953aa4bf3eff53e9b19c28355054d8d591049d4e63b83794580e4536536e1022ab80c983ea","ssdeep":"96:hIMSUAeLFVNpygrRgz3Mm/dPbvqq6MiU98tbN5RF2x+PrYK8WaUB6irfgpjNLDv:hISLvyyRacm/dPzqWOtfRFl0K71WN3","tlshash":"9cc19f9ab83ba48b8478867ab6b1811f35762a5bfde336eccd141513af1515040c91fc","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.659586Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1583,"timings":{"blocked":1254,"dns":0,"connect":0,"send":0,"wait":328,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-sports/navbar-sub-sports-first7.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sports/navbar-sub-sports-first7.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 26 Jun 2024 06:30:20 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"667bb57c-b3329\"\r\nDate: Tue, 03 Feb 2026 09:58:10 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:10 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9280\r\nContent-Length: 557742\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5116174430548728411\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":733993,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d260f43beacd39ccdf589fc66c4fc650","sha1":"c7aa7c21ad58c9d0f61105749320dfd7aa300b27","sha256":"d0b5ceea7808e8a17b02a40afc31cf8ad2ca81a816d533433562daa0d7681ce2","sha512":"d7bde338a6eea967f9b9700b74e72bcd121c7d25b2fd5b7e7486b225ec92447afc4d1c6fb2289763c7398a9f78ec83654eb9dd2026757e5181a2b4084d599377","ssdeep":"12288:BAWR2Y+XP9ap4SjBUsDWgClf3exC7id+9/HM41ua5uuAQJpwgkYbTrd1:m4R+op48BUeWHkT+tM4kIL//1","tlshash":"4ff4234aea5bbdf20334a0f450397fc67c721ad6dec4a10e06d1adc20a6cb59514ee9e","first_seen":"2024-06-30T10:30:19Z","last_seen":"2026-05-07T06:02:57.599555Z","times_seen":79,"resource_available":false,"data":null}},"time_used":2778,"timings":{"blocked":2026,"dns":0,"connect":0,"send":0,"wait":247,"receive":505,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/fserver/files/gb/1188/sportTeam/8/1599559100674.png","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /fserver/files/gb/1188/sportTeam/8/1599559100674.png HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=2b8dcfae973a524ce800a350c729cfda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\netag: \"5f5744cb-2b5b\"\r\nexpires: Sun, 08 Mar 2026 10:58:21 GMT\r\nlast-modified: Tue, 08 Sep 2020 08:46:03 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 11099\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"919b29ec584ea694fdc830d0338055d1","sha1":"335005fa52862a2d77759f678eeed54f59fe635e","sha256":"e896f47fa49eb01b084fa0400e0923b3e19176724a7f11044b59f56024aede3c","sha512":"2fa2ad2898daa79a9d28cd2de923e0c7c8fa991e6b32b0e8c307accabb66b3593d57191a40a551d2d95ef27a1e3b8608f14f3c7975d05c1b17a286062a694526","ssdeep":"192:ISDS0tKg9E05Tlb8pvi9OZCmGcVMxcXz/Buh9TKuD8YLBlsjC4I:PJXE05Jbcjczh95nLBlb1","tlshash":"fa32b07eb759d17d348efd30469f97c397a9321dd228252084e6c9d8198cf22874ba8b","first_seen":"2023-04-15T15:54:41Z","last_seen":"2026-03-05T11:01:01.134301Z","times_seen":92,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"manbetxss.com:8989/fserver/files/sportTeam/football/it03.png","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/it03.png HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=2b8dcfae973a524ce800a350c729cfda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\netag: \"5bed34be-1b6b\"\r\nexpires: Sun, 08 Mar 2026 10:58:21 GMT\r\nlast-modified: Thu, 15 Nov 2018 08:56:30 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 7019\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7019,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"a853bec439a1590b0da6896f86f76feb","sha1":"7f21d1dc5395fcc056ef4d91a3cf85782de121a5","sha256":"f3a24872bb0011114620d987e4c9d49bcfe8716f1fff47abd35e89ce1ec56fe8","sha512":"b748164adfd95c80c11c0d146e86972006727fad9f95d53fa9378ef360aac683efba0896a1094d6676df954770bb2f39be9bc1548bd3b859279b344e4c6eff64","ssdeep":"192:PFnNWvyxwEquJrpW0QsuchReVuroc9LMMabC:PlNWaxxrpWwuchYV0oc94Mae","tlshash":"ece1ae01b8cd7807f50ae67bb56653e0b288c1d770514b1b4ce3f8d006455ae8cbc68e","first_seen":"2023-05-11T00:23:02Z","last_seen":"2026-05-01T19:32:21.572989Z","times_seen":598,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/fserver/files/gb/752/carousel/10214/1603796870167.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:25.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/752/carousel/10214/1603796870167.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 18 Nov 2022 06:09:02 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6377217e-63fcc\"\r\nDate: Tue, 03 Feb 2026 09:58:27 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 09:58:27 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9279\r\nContent-Length: 311459\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5473688326194734286\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":409548,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"49829070bb5346793d436753b24ea67e","sha1":"edf57f7cd0cc5a7491297523a6dd4459c4068296","sha256":"b293a374e46076f9c09d1360dfd334b8a63a543e3461f63cc6f024225e683087","sha512":"617d8749787be26e18366da9dfae9b53bcc05fb1a2510f3b1e024a13bed8d4e3d0f4d386f57977e9d19386cb23a00b5771318a4d4a84c7cde6f580b9f922c9c8","ssdeep":"6144:QybazvQdHP6nsw1ntXBuY3w5mYGnPpDI8so3ZG/zFVPdxH1vJyNaWUQZ6lZ2UDAd:pIvQdv6nRntgY3IUFR3ZyPdxZ3U+m","tlshash":"19942311df9b752c83449213938b7a5563f69bd4d262ec56a339b02edc81ec1faf3488","first_seen":"2025-03-06T16:47:59.338416Z","last_seen":"2026-05-01T19:32:21.551729Z","times_seen":14,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":299,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com/","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T10:58:13.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: manbetxss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://manbetxss.com:8989/\r\ncontent-length: 62\r\ndate: Thu, 05 Mar 2026 10:58:14 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":557421,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T21:34:24.355052Z","times_seen":16222068,"resource_available":true,"data":null}},"time_used":1280,"timings":{"blocked":515,"dns":16,"connect":247,"send":0,"wait":247,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/themes/gui-skin-default.css","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-skin-default.css HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 11 Jul 2023 08:40:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64ad1569-7b6e\"\r\nDate: Sun, 01 Mar 2026 12:49:42 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 04 Mar 2026 12:49:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 6253\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2777840432403434293\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31598,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7014)","md5":"1d6c464e8e5800ca483689206174ec6e","sha1":"d5ff05232c516152a711ec5c6d060a2f2cc791e3","sha256":"08d29322d883091252b3348e9514dac589896516374e8a319fd1190dd67f8e30","sha512":"4e259baddb36f5a8894c26f0f50c453200cb738c5e9d8131e146288a0d25ed3d4dd42f173392f8dbae521fd8344425b2b6e1ade92bd08edf7ab010cb577f775e","ssdeep":"384:/FboUEeh9ScJRfc0uGWw8Ms4N4muQh8v8brn8w/NtSmdz:/FbPSVGmNQjLPFtSi","tlshash":"7be29834f20022a9b563c7a570d1dd4a362de592d2170ebdf26b319c8f425ce263bb6c","first_seen":"2025-04-07T03:18:03.900415Z","last_seen":"2026-06-07T07:30:11.508406Z","times_seen":10705,"resource_available":false,"data":null}},"time_used":3963,"timings":{"blocked":1683,"dns":1043,"connect":272,"send":0,"wait":591,"receive":0,"ssl":372},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_c.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_c.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1ee7\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 5931\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4352396581384502654\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7911,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"804e9c1581232a1bb74c5fc4c1e61719","sha1":"7a3604459d934778054b3a35453f46749ed6b49e","sha256":"17d114f27fdc9b82ab7a6e1a15d25db6bd77da641cb3f6d9858538b0a282735e","sha512":"340c25602d1fd6155fe362b981e1ce732ececc6c31587b2fdb3985a595b9efbb4b1d39ce16204264fa1c772969c680bfd0414d3a917b22510ecb8a7d0a47b27d","ssdeep":"192:aISLvp3wSy3gsYsGgAaYpUtvnApzdgh2p6Z6clYeMwpJpMBmAjrKhAWZlH:aJLBgSy8sjAkIpNp6blUwpJKwiWz","tlshash":"d1f1a01d23cdff5f4557827d668924593d144acc9ce37bebd86a52234c45b2412c3d61","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.650346Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1264,"timings":{"blocked":951,"dns":0,"connect":0,"send":0,"wait":312,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_b.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_b.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-da2\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9273\r\nContent-Length: 2569\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14780999321194888716\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3490,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"af93eefcb52c7fb06394f09f39c18c5a","sha1":"6d3e6b06cc9962e2f9f4ec62a44721f67527903d","sha256":"5773c02722731252ba119a399b1538e0b38fa05333b613bf3a2315c3bdf70761","sha512":"46770d0b6b734cd7a771fcb57c9cdcd35f10fc055fafa919aeb8c9b6068f8de7ac6bdd6d8c56de7db4f90ace87f839f69a2b1acf64eddb942e14e89353444eaa","ssdeep":"","tlshash":"26717e3e4a65395e30b18952a5fe77d22d350d2d01be5e7be9251bef06353914040c96","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.569693Z","times_seen":21,"resource_available":false,"data":null}},"time_used":2385,"timings":{"blocked":2140,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-sprite.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-sprite.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-441f4\"\r\nDate: Tue, 03 Feb 2026 09:58:09 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:09 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9281\r\nContent-Length: 210664\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9409675190012403796\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":279028,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4e41dd50bd857b9d65d4b6a6a873070f","sha1":"db3669c579873b0e27dc4e3503a3e92ac0eb93c2","sha256":"7da30473066d2efb9997bc6325969c86056befa4a0449508ec661473f05ce818","sha512":"179b6210c8ce16ca7d733c8fa65cdbcd44a3d4947e8a7d3d6e4d7249fd1c2e3bf2e435d2ab67cc720b5ad8a474a666f321fa71004e0d25e771c248e4646abe45","ssdeep":"6144:Hl0mutWDJHj0wy24GQm+wr9Y0hFwOKScYzWEjCO9aVZ/Fzlu4/k/Ixyjs3ctDu4u:HSmutWD40r+0hFpKSciuV1z/EfjsunpI","tlshash":"035412358e3fbe5e5c737937b4008a654a5047a79348d63abb4de64325b6e812cfd009","first_seen":"2025-09-27T13:51:17.760144Z","last_seen":"2026-04-05T07:52:11.17405Z","times_seen":35,"resource_available":false,"data":null}},"time_used":2429,"timings":{"blocked":1844,"dns":0,"connect":0,"send":0,"wait":275,"receive":310,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-lottery/navbar-sub-lottery-first7.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-lottery/navbar-sub-lottery-first7.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 19 Mar 2025 09:15:08 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"67da8b1c-16b75\"\r\nDate: Tue, 03 Feb 2026 09:58:10 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:10 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9281\r\nContent-Length: 70595\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9923518058950908351\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93045,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"741e06e1c2f499e9ae3265a5945f6237","sha1":"6dd98a0768af27f1344cbea4b545e1359b6e20b8","sha256":"244c75c828302f30038f3e1668b3b76e27b8b85e24b5d5ef1ef833044bd0cfad","sha512":"a8f1c0b05b637a9e19f7e1ec01be2ef5ff9d5a1439372c599ec0d0fe8196f290cb2e5daabe291de8fdca9fcefb78fedad00947336d3ecb36330011dd43add2e4","ssdeep":"1536:c8CWGPZJnKZPNKQwHUnhzNAEPkup1q9c3y5IMaEd+la7eR9nooovP7q30NEzTmOb:c8CWGrUEQweNBsGApu2d+cWnOP7q30cX","tlshash":"3193127482e9ea5537bc5629e1471a5c60da064cc804dbc884fdbb97878eb1bc6f23dc","first_seen":"2025-05-13T03:38:27.925559Z","last_seen":"2026-06-01T05:12:49.184695Z","times_seen":68,"resource_available":false,"data":null}},"time_used":2261,"timings":{"blocked":1995,"dns":0,"connect":0,"send":0,"wait":246,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nEtag: \"68b69275-1beff\"\r\nDate: Fri, 06 Feb 2026 06:23:31 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 06:23:31 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9994\r\nContent-Length: 114431\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11410030970980298566\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114431,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"13705bb454fa93a337d360fde95d32ed","sha1":"f17931976273af97665c359e14c5d7b673ded90b","sha256":"221a4adff18935e8dd8d421dd0dfb431bab972377ff4ead01e00cdc9dbf73127","sha512":"fc3c18262e7afc15b4716e6ed6869f20c27749dc181e010736e5314d0cc96d33826337eb3198e8425dbf01766d7c7cd2d85ce3cf594c4509106540464dda76a7","ssdeep":"3072:d1tyThaOfU3ozO51gip4i02XfacJ7TznFNnOOa:d1tyT8cUM5hcRnFVW","tlshash":"20b312a0dce07db423bb950ca3bc9f186243145f03a6269321b3f5430d627a4a6fd772","first_seen":"2025-09-18T16:22:49.418873Z","last_seen":"2026-04-17T04:44:35.216553Z","times_seen":1726,"resource_available":false,"data":null}},"time_used":2781,"timings":{"blocked":2469,"dns":0,"connect":0,"send":0,"wait":308,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/index/getUserTimeZoneDate.html?t=mmdcr3an","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /index/getUserTimeZoneDate.html?t=mmdcr3an HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=44d17259ab44b1b54887077d522d7137\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncachettl: 3\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 00752-01-00000000-17727083019522\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 96\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"a84964fb9e94c3bdd005558e2279e904","sha1":"b5873a1949c7f8e80f598c87dc0198de39a7d1b0","sha256":"0c49ae26b423eb7f13cf82e8df79abeec5915dbe779d0e4f547429ef0de29868","sha512":"43ea3a41bbe70edcd61f5323437e93c1ac9449a8b764f9f8f6345b3de72f6b5e5a76d85439006a0205c94bbf54a8c0ca41ae66fba18e4b56e4962f01213fdab6","ssdeep":"","tlshash":"b2b0922409e26f1e1d2094a4da24b4ce0d19752b08c2d6a41aafed1ca499a6e2809613","first_seen":"2026-03-05T10:59:01.551849Z","last_seen":"2026-03-05T10:59:01.551849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/gui-base.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/gui-base.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 17 Aug 2023 06:15:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64ddbaed-ee5c\"\r\nDate: Wed, 18 Feb 2026 21:34:32 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 21 Feb 2026 21:34:32 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 520\r\nContent-Length: 15779\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9979692376539704716\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61020,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11056)","md5":"e6ce47d880d7a50ddf91b074c8572edf","sha1":"6a3657c67209136e5b544859daecf16f2d153b72","sha256":"c49e04c7ecfd07c74b58cf161ef2b58f2bc837a9091ed1ae090a33734cdaa734","sha512":"0946a1cb9d048b485dadf4056a4aa7be685a8906240a828a5ac776a4e1eae2ed5ef238bd0724da41cce33324357ba44704d34a6766430f1552630f9a17b664f4","ssdeep":"768:+lkflKVlvREcS38xHmuqrRO/5IS3oFaJX+mQdudqD9jAXImsUh8H3yALdODRG4eK:6ClKVlvREcYoHz0PszIfoALkMEY16pB","tlshash":"4353c80a72b130a106efb1b6515f460d323a6927d44ac458b97c9ae43f74f28316bf7e","first_seen":"2023-08-26T00:19:56Z","last_seen":"2026-06-07T07:30:11.543891Z","times_seen":16696,"resource_available":true,"data":null}},"time_used":2558,"timings":{"blocked":2272,"dns":0,"connect":0,"send":0,"wait":285,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/bootstrap-dialog.min.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/bootstrap-dialog.min.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-4ea4\"\r\nDate: Thu, 05 Mar 2026 05:23:12 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sun, 08 Mar 2026 05:23:12 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 5188\r\nContent-Length: 5007\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11163087163612109509\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20132,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20132), with no line terminators","md5":"5ce8851dc823429a42ab6147554403cc","sha1":"28f381f0e0aa4f5d56690e65723bd97fb59a38e6","sha256":"dd1edf5e54071903c4c1e81e33636444899d645df6b18bad22249da07f91c811","sha512":"f42a4d48c666d9c78fcb6c6061141452899085c504bf15e23749611dda00b6913e75ebbe47ca436a2ed016175d0918f193e474f13974a2f6a5304e18909a87ee","ssdeep":"384:3ai3F3N3VKUINthDa7Vnq86z3JCDKSz1m0hMtkJI2Cg0WEUOv5Dq:T3l3INthDu1YCDKS5flC9m1","tlshash":"6a9261ccb2d9b54c47abe072143f200df03a996951496119bc79e9ebecf060aa077f79","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T19:03:26.492059Z","times_seen":17552,"resource_available":true,"data":null}},"time_used":2659,"timings":{"blocked":2396,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/061410/rcenter/common/static/css/gb.validation.min.css","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/static/css/gb.validation.min.css HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 05 Oct 2022 09:40:30 GMT\r\nEtag: \"633d510e-2d52\"\r\nDate: Mon, 02 Mar 2026 10:32:46 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding, Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 05 Mar 2026 10:32:46 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 520\r\nContent-Length: 11602\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2533133666045788611\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11602,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2295)","md5":"12630e8fd95b53f705159b9cd1c2b372","sha1":"1be26841536b82ff280211796e9de339c642795f","sha256":"2c0c712726319f142f14ea06ccdba0ddb9f880571581ab1d0c193d4083a5baa8","sha512":"3084c7d3f917e379235e29b0f641e69f7a9a89b9c30b088292e3b3800cc67e16414b2df9aed1ed144cd2c37bbd035a8f6389d71ace13d17dd32a315c7719a88b","ssdeep":"192:zyzNcfuLLpjyFp291taF4lcrCQ4RFvVhkxP4OKyptj6ZqQ:znmdyF24F6crCQ4R4P4Dx","tlshash":"ed32a673ba220244790d9d442f46ee02bb1b40176a4f8eabff91786cdf825c9b67074c","first_seen":"2025-04-07T03:18:03.798848Z","last_seen":"2026-06-07T07:30:11.495586Z","times_seen":10770,"resource_available":false,"data":null}},"time_used":3040,"timings":{"blocked":2784,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/theme/default/layer.css?v=3.1.0","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:18.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/theme/default/layer.css?v=3.1.0 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 03 Sep 2021 08:10:10 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6131d862-48e4\"\r\nDate: Wed, 04 Mar 2026 14:41:28 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 14:41:28 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 7444\r\nContent-Length: 3111\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 227795794812332789\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18660,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5cf9259b7dd27aacd46161ec23d261cf","sha1":"ba0c399616a5ae9cdd8aec5b76ba4aae4822367c","sha256":"7f73a66b3a9a38576d124b6243a8984d795028e3493b8fa3f688d8dbe10cbccc","sha512":"834ae73090b76f7dad48a5efa850a0009d5104cfcab402b7c343ceb49410584c3a60a4eea800d366f380dc8364f5f00e3d38101c379fd5fa19f9492781d9ada1","ssdeep":"192:99OUf4PBsPIOpyNYpyBVpkgdpkqg60yQG0yrGlwSlyDXLIXiYHIli5aT6XeFTfb1:C4CyFP/FgkFxUE6QS","tlshash":"b7821de599a31584751b8214dbee267232f85c83e40fcc6cf7df354f4f086a592a1a4b","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.53514Z","times_seen":17714,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"manbetxss.com:8989/fserver/files/sportTeam/football/it06.png","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/it06.png HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=2b8dcfae973a524ce800a350c729cfda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\netag: \"5bed34be-206a\"\r\nexpires: Sun, 08 Mar 2026 10:58:21 GMT\r\nlast-modified: Thu, 15 Nov 2018 08:56:30 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 8298\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"0b76a4c290e34d2c1604f7db08a07545","sha1":"b1bb221b8d8912a6002b2c19d8e2e92e4b142d09","sha256":"85781c7e7292d67ba92bf0f3475ddd554c7de1ebee621307ef322dd11d7ce1f1","sha512":"61ad982f002007e54e46e011030004ffb2bcc6ec1647f4b9365cb227a089622a748dae88e97645a867e7e3fab970758bf085666f996a30bbab21fb34d3e3a4af","ssdeep":"192:j3Fz6G68f0hmWS58Fdc0keOpOzkszZ+UPHgO+5:hz6G3fOmJIcJpOAYrPO","tlshash":"2402bf492e6370bfdc03b4257d348f19cf8980a69bb593a850ef4aa3455c7ec1bc9b11","first_seen":"2023-05-16T01:17:18Z","last_seen":"2026-03-05T11:01:01.129924Z","times_seen":670,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/fserver/files/gb/752/carousel/10213/1603796818241.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:25.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/752/carousel/10213/1603796818241.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 18 Nov 2022 06:09:02 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6377217e-5dceb\"\r\nDate: Tue, 03 Feb 2026 09:58:33 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 09:58:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9279\r\nContent-Length: 292207\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8528400465026319395\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":384235,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4f351d6c7b9676cfb1dfad5ca4445bfc","sha1":"6cea2fb0f3b7520b35bc26196a76d8adeed9da71","sha256":"70bcf6927a8df0383a4965bcb52cee156389caa6f32358bba7374e14b96467a3","sha512":"3d4fd7432a76829f4c51a6121cc34bdda863fff7e2f33de7bdcb11df50fd2342ece3ddd29a48369f24381e2ec6512295a9ad570d3397ef4b8cb25da16892b60d","ssdeep":"6144:VE+nnKdfIcD4nfmMW9/19FZas8D2gdyMs/QRPehS+k4J1iZ9ipiamYXl2:NnncDJ1Za/qgdyMs/Ird01S9apo","tlshash":"df8423317f8d7ccaff24110871a67fa4e9216d24020da986c62d35e24e42be7b773456","first_seen":"2024-07-11T23:45:32Z","last_seen":"2026-05-01T19:32:21.614145Z","times_seen":22,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_a.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_a.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1804\"\r\nDate: Tue, 03 Feb 2026 09:58:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:36 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 4540\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4567901535710905744\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6148,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"eda604756e8d4ee6bbc245a528a49a5d","sha1":"8251e717a0ca719fef5155e3b6b81de0e0c3df5e","sha256":"70a17386103fa7c72941ff128e7e726fe01e28953b608a9561d6ffd2141fccad","sha512":"569f4042e5c55d2957a4abcbbc4f8b454cb3af0d6f1f22b8c0dbfe0886b7c87da4ce27247a87cff8a7029276a1c067b58b54dd8938456ad9ea42d698ee5490aa","ssdeep":"96:8IMSUAeW3hSo3OIYhPxExTW2iqUedkuCmHpXFNa3pOQvfPJeoj8OLIc0XKdAom7u:8ISW3hGZEniXlsJYv3/LNRio5Yl2dv","tlshash":"bfc17ebe1212651ea8890b387e46e7427cb9334e89e51de261523a0f95db7b0908275e","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.573776Z","times_seen":21,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_f.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_f.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1872\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 6\r\nContent-Length: 4675\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15070446327839792785\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6258,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"9e9eef0482640f725511691858d9ac08","sha1":"fd2a8540894f585e468911228a7bfd49fa6eb058","sha256":"d2bfe31bbd82b5108d50360a83a2e5b22125e9d18f5d40642b92eddbe1f4cde9","sha512":"975f15005dc96eda245bd0a30bca25140b288c8e0372a8ad0e87c055fec66c6eca1325b2101fa5dc3b041898775535d58fee487e13601faaf12d7636c2c6d59c","ssdeep":"96:iIMSUAeLFVNp6DvfLIF6ehuNHdw23i2nq0aINqxPcdEVuxiqjiElUkseWUdQyz:iISLv6DvEFThu13i2nK7xE2VuweX/snC","tlshash":"b1d19eb9abafb74d1cf1806f2fefb15d725148a2205f08dbf86c61cbd0a19d01646954","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.674047Z","times_seen":20,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/float.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/float.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 26 Aug 2021 07:50:18 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"612747ba-1b2f\"\r\nDate: Wed, 18 Feb 2026 18:35:50 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 21 Feb 2026 18:35:50 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 519\r\nContent-Length: 1929\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8180768838377464259\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6959,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"829af863b0cdc4a603919824ae046299","sha1":"1d417b1553e4ecb7125ebf2005b74255291fbf73","sha256":"1dbe4afbc9ed220c08b9e95577b56f83e2e8e0f7620c5dc18266bb325e5bb271","sha512":"e1202fa26fd353dfb2f989d3d45512e0691c062076297399f5fe62f63e7f5b194fec4a3d7fe2f09be1a6a945e197e7d68445d33dcc6f80b23a315112d9ae5b6c","ssdeep":"96:G4SXFXVXDL+R5NxuHie/moRUgIm/Kv3RKXg+Iw3qCNv5IC80b7Yr+HpH:G7xhDL+jNxzeBVLKJ1LeqCwCxb7YspH","tlshash":"04e1506e03b1212195aff1beaf1e424c6631905b2507dd057e0c87c46fa493c4636fee","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.51234Z","times_seen":17483,"resource_available":true,"data":null}},"time_used":3527,"timings":{"blocked":1603,"dns":982,"connect":292,"send":0,"wait":312,"receive":0,"ssl":336},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/fserver/files/gb/752/carousel/10496/1772242109702.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/752/carousel/10496/1772242109702.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 28 Feb 2026 01:28:29 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"69a244bd-ad991\"\r\nDate: Sat, 28 Feb 2026 02:03:56 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Tue, 03 Mar 2026 02:03:56 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 12799\r\nContent-Length: 531658\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3636743852523020002\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":711057,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c4817bf554c01057b13ff670570abddc","sha1":"3030f6d79fd05193387547b75287264bc69a22eb","sha256":"3f0a8f98c9c729257d2c1959e748b95f80201b98fd931bf5cfc7f411c80e9aa7","sha512":"d0339f54420d5e5afff902fbf755f99709164b43b2dd71069af17fb448bb07685911653079eb35f02e8606d5556178771d37733a6fca58670e26deb161718c86","ssdeep":"12288:SM0a/e8o/ZNtPRxlYqVkeFn3Hm/5qxfzjzFC7uvf0wg54MSMqN:R8N9rlhHcqxfzFEuX06Ms","tlshash":"e9e4237c3f62ef5d4f9c4622843763443ce5466b48ccf027a9e5b0d620ee6690b9f968","first_seen":"2026-03-03T22:05:42.265435Z","last_seen":"2026-03-05T11:01:01.050135Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":873,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/fserver/files/gb/1106/sportTeam/5/1755210501776.png","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /fserver/files/gb/1106/sportTeam/5/1755210501776.png HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=2b8dcfae973a524ce800a350c729cfda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\netag: \"689e6305-5571\"\r\nexpires: Sun, 08 Mar 2026 10:58:21 GMT\r\nlast-modified: Thu, 14 Aug 2025 22:28:21 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 21873\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21873,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"b6fdc27a5b0cb149db01fef31dc6f659","sha1":"80052ba1bd745d6e969d4f091abae9067f87406d","sha256":"705347d9c881764babd948ef65e7f3e0e2931e3193505ff8ad53ed709c32045d","sha512":"ae63c4098c155459004e11283b40af3419c348b3a9f158dcda99142b12b8a02d789628bab097d68da74d21ac05326390c69151cb8679016cd9e77261cb81b029","ssdeep":"384:w+HoomvFCxN4mixwqjNLf4b/Gu5CBHtZt3Lq7QtsvOEO8eV7v53mPfaWg7HWYz:vVmkUmgwqjNL6aNH3OPvRWv53mPiPW6","tlshash":"b5a2d0c03df08c1c4b9ca426f2a546295197b62c337b1e2ed53826d32597b5a06eefc5","first_seen":"2025-10-17T16:13:31.56861Z","last_seen":"2026-05-17T17:52:44.694239Z","times_seen":28,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/fserver/files/gb/752/Logo/1/1577453539061.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/752/Logo/1/1577453539061.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 18 Nov 2022 06:08:30 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6377215e-3885\"\r\nDate: Tue, 03 Mar 2026 09:06:30 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Mar 2026 09:06:30 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 11011\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2153689630234265674\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14469,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (14468)","md5":"84d926e573341cb388a39cd634579083","sha1":"feba371cc76b63e4dd795ee7d5eb6e09a771bac7","sha256":"cb75a1550e2e0b06943d42d5aa5e766aeefa2478dd248c429d7cc7f8ea8ac2c7","sha512":"4f71e052813af17c5967746f6e60b24acd76163a532113da494d45a022485fc6cff4e371db8e981515f4d21e1d65b6470e69d262ac40179f12bfd711c3c0f390","ssdeep":"384:/hOdbdl0Vl2so2CxpUPdqGgwxP5YjEt5oEBf1b:/Qb3NetlPao33BNb","tlshash":"a052d07f7dba1c9ab12c53a3b4d30935384dcc3680dc1c29e76b656b7ec2aace220155","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.70757Z","times_seen":22,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_d.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_d.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1d3e\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 6\r\nContent-Length: 5602\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 438568186671247352\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7486,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2e85397b8d046fdf68f0ac8998343bce","sha1":"add3f158cb21f394d9ddc017b50c78c12f6e664e","sha256":"1d521306ad5a4f737f69a89403b7107e2445aef1da37f8d1a89f4b625f29e26f","sha512":"132e9fc58ad255216dc43aa09eb08a20acccbf4d795bf80a3c0bb4b81ce3d9524a7c42985b3db4ac9384c4da41ed56d8ac531872ffc3e10d9d1c4fe7f7a395e9","ssdeep":"192:vISLvnEZqjXAQOF6OuCJnOSexfJht/G+HguvEpn2:vJLPljnW6OuCJnOpJrG8guMU","tlshash":"eaf1bf374f580c2f21712b8456be013ffd2a5e2c089a3bbbc924685e9a31f0c1055ee9","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.628962Z","times_seen":21,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":256,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/favicon/favicon_752.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_752.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 05 Dec 2022 08:15:08 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"638da88c-d34\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9277\r\nContent-Length: 2485\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14898204944996723592\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3380,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a689115c581452e5e1849d14b1509243","sha1":"fb156ddb4949dd49c5060a5c68a1af1f206ed48e","sha256":"913f73a3876446d559765631974553443549c798c81eaf4573f8d4f2babf1d31","sha512":"bd0e95b48626a040ce785fc61bdd367545370cf9fc985585435cbc7723c8ac1b4abf8999580e06432541aa0bf868572a268cf605c82f74ccf5567402b86fa155","ssdeep":"","tlshash":"cc614c37738d3c2a1ae84d9da0aa564b3ff59a6b5ea75f35d02d19831078f9c40c044f","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-23T08:38:57.887449Z","times_seen":26,"resource_available":false,"data":null}},"time_used":974,"timings":{"blocked":734,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_c.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_c.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1b47\"\r\nDate: Tue, 03 Feb 2026 09:58:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:36 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 5227\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7579963837831259849\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6983,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"15f9ca700465107d225012357e0c08d9","sha1":"ac0df20230fca9342be053fd02546016aca320da","sha256":"fb51b2aa2488483a6bed16f8ffb6de769849222d252f0315818f86f59e50664a","sha512":"a5c4175a3e5e94bec76dacd746c46e34f7e89feaf83ea02f182762a6b82c2af542b8b990a7212a910c781c43e10e4b25550de4a1ea4b5562b7bf29495bdbb250","ssdeep":"192:0ISLvWsu8MkxTWA2tse4p1wkuXn7nGYiju3sfezTUs:0JLHu8MvDtse4puzGfOoezR","tlshash":"57e17d3dd761ab1170bac3d864af264778ba70af2bda2991005837f8a014971e3761df","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.673162Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1656,"timings":{"blocked":585,"dns":1,"connect":286,"send":0,"wait":465,"receive":13,"ssl":304},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_d.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_d.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1a44\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 6\r\nContent-Length: 5031\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14705995748533695393\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6724,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"12e653334afadd703223f2a61f85ee51","sha1":"c0405983e3cd5a71627cbbd47c5207ba4eeb1486","sha256":"1cb10519ea40075d1451b5837ff7b927ed8aa5ee0a010e67824d2493fb346cb4","sha512":"31d67e9fa52b3b88db21d21418ca4d678e706853035d818979b4f0a928ec41f95ce88dd7dc7a079ad4ae48d5366933971c4e0f9e9559669cdb8e2dd0c9feada8","ssdeep":"192:EISLv5BUWrfJGA1A+vbUsi73Q/BTpZlJ60eYzKbi:EJLhBUqJD1J673cpjc0Zf","tlshash":"6dd19e7d0d6adc8946b7d29e2a8abb6a3d56000f15132ed3cd9e14cf634c3f19a50c10","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.628417Z","times_seen":20,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/livechat.ashx?siteId=65003016","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /livechat.ashx?siteId=65003016 HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/x-javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 12:42:30 GMT\r\nserver: Kestrel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: WfqhgJf3x6n0BYCMfcTZQrhY7VjoF3-FXi3QEvnbnnYwJQC5K2CG5g==\r\nage: 80149\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1083)","md5":"6040dc48164fe6801223cb0b5552952f","sha1":"603fbed8b7a5426e9bbb12e57bc88b7a4758e022","sha256":"7b7da61b69bae4b64fc1637348893c3281091db312f37d19ee350891bbd7ea7f","sha512":"004fc22ca684d867b2cf52f20ab5ae75bc226e1405e12572fab721a02d46ca54d739343907d3eb5bd4316207762f0c928e91718f2063fafa6d0944812b30896d","ssdeep":"","tlshash":"115175e6676e0110073020a99d7b738c98bd91593d4c8c97f8bc922035f1f9f9655ee9","first_seen":"2026-03-04T14:45:19.176963Z","last_seen":"2026-03-05T11:01:01.113173Z","times_seen":16,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":439,"dns":123,"connect":3,"send":0,"wait":3,"receive":0,"ssl":310},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/favicon/favicon_752.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_752.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 05 Dec 2022 08:15:08 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"638da88c-d34\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9272\r\nContent-Length: 2485\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4964729539596488726\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3380,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a689115c581452e5e1849d14b1509243","sha1":"fb156ddb4949dd49c5060a5c68a1af1f206ed48e","sha256":"913f73a3876446d559765631974553443549c798c81eaf4573f8d4f2babf1d31","sha512":"bd0e95b48626a040ce785fc61bdd367545370cf9fc985585435cbc7723c8ac1b4abf8999580e06432541aa0bf868572a268cf605c82f74ccf5567402b86fa155","ssdeep":"","tlshash":"cc614c37738d3c2a1ae84d9da0aa564b3ff59a6b5ea75f35d02d19831078f9c40c044f","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-23T08:38:57.887449Z","times_seen":26,"resource_available":false,"data":null}},"time_used":2649,"timings":{"blocked":2399,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_e.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_e.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1098\"\r\nDate: Tue, 03 Feb 2026 09:58:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:36 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 3075\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9885210871095665332\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4248,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"fefd3c9b92160c8c8408fe4d6652280c","sha1":"70facfb9104169eeaf9ddaeea05a77bdf368715e","sha256":"d67dc60f79d3949b3ed80891d561c6d1b50542020e775e6e9d736a573384c7c9","sha512":"53bcc1f18c65b777e68670117340c54a3a579a8f4dc0d699aedb9b99bbe96ed540af5b721cb71d218181803390ea2bebfbcea305dbee1866c7c6219d240f0225","ssdeep":"96:uIMSUAeW3hSo+a2sR5Op65j7mUdjax9vnb6b3EpFnqHPBN++n742:uISW3hnTu6539KnWYp6PX+h2","tlshash":"18915a7b7c27230f48a0ce28a25652723cba878ea50d7c56146b3876959bff000c1ced","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.55751Z","times_seen":20,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/index/icon_e.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/index/icon_e.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-2b7ee\"\r\nDate: Tue, 03 Feb 2026 09:58:39 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:39 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9277\r\nContent-Length: 135364\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16309032446001806495\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":178158,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e9b03b18c7fe6e199c93f6a235766a7a","sha1":"25fadd3321f8ca7f9ddc352dca79fe9b5a272114","sha256":"aa8e3aea45d9421a2e3aaadd922e3319ef9766a26610bd143d056f60dfe87b6d","sha512":"686cdd2233fc03aed78727f748a4641083cca5cc70fa2fe5c3ca12fbf96f4d5727c3822396e4658bf08e85ee3b6a3f86f3f91961c6940ca9f9ba8e7e3b52ff46","ssdeep":"3072:/95Fwcb/G872x5AXPRAuSKWenEpwPVMUVLVK9HAuLHAN2WKV:/TFb+Se5AXpFjn2YVMWyLI2zV","tlshash":"3c0412370950be3c52adab342053b57f43f91fac4279d1186337ed1888ae352b895ee9","first_seen":"2023-06-07T12:23:37Z","last_seen":"2026-05-01T19:32:21.662384Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1390,"timings":{"blocked":1092,"dns":0,"connect":0,"send":0,"wait":293,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/style/bootstrap-dialog.min.css","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/style/bootstrap-dialog.min.css HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 17 Nov 2021 06:05:57 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"61949bc5-ad9\"\r\nDate: Fri, 13 Feb 2026 06:03:15 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 16 Feb 2026 06:03:15 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 629\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17462319212899915504\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2777,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ee88d3dc08f37769d7ea721071ea6d03","sha1":"626dc09d7d193850995c5fda76105d8f701b2654","sha256":"20148221a0402fa4a6efe64430263fbb84ff4d524551bce104e46a465f578157","sha512":"95bf3154778820c950da4ba6d903367f2dfb3c14e5277c1365877ec99198dd839a2674865ff387b06c0d14d9cebf16cd2358405c01a0b0dbae93d93f970449d6","ssdeep":"","tlshash":"c4518a0c0eaa0891a15f45c837ee6f3164b43093444eae9937ef332c8f85466b9f6b04","first_seen":"2023-05-18T23:52:16Z","last_seen":"2026-06-01T15:42:22.763367Z","times_seen":34,"resource_available":false,"data":null}},"time_used":3710,"timings":{"blocked":1663,"dns":1042,"connect":287,"send":0,"wait":377,"receive":0,"ssl":339},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery-1.11.3.min.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-176d4\"\r\nDate: Wed, 11 Feb 2026 20:13:14 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 14 Feb 2026 20:13:14 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2397\r\nContent-Length: 33545\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4919673367267042171\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-06-07T07:30:11.536389Z","times_seen":18326,"resource_available":true,"data":null}},"time_used":3704,"timings":{"blocked":1667,"dns":1040,"connect":290,"send":0,"wait":293,"receive":70,"ssl":342},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/themes/hongbao.css","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:17.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/hongbao.css HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gv8yqx.pham.xin/ftl/commonPage/themes/gui-base.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 30 Mar 2023 06:38:07 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64252e4f-d530\"\r\nDate: Sat, 28 Feb 2026 23:45:41 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Tue, 03 Mar 2026 23:45:41 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2397\r\nContent-Length: 5666\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13212127818039210689\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54576,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (336), with LF, NEL line terminators","md5":"a212ec8d2af1172e5fe97229a8cdd470","sha1":"676b870b21e2b4f18dd23dd24baa8a30955b8362","sha256":"910aca19fa0a1df0c76607fdde36968687403343a50022bed3693011abee9fc8","sha512":"6f8ef1e9c22978fe39412ca413b132e9ae54d5b84c1b95b6f40b5c7bd44e726212ca20b731de29294e77fadf0651f3cbc8bfad1d6a4ec6b808064faa4aa3811b","ssdeep":"1536:qsgR4FlccsG7TCbzG3ArEDTgkvudNssvmp13ZUcPGZ10iS9EvlBcovGF5XAso/GQ:qiu","tlshash":"78336d05e241abab21dad174230bca3bcdd81485fea4dfb7223971f4cba55e5b03625c","first_seen":"2025-04-07T03:18:03.889172Z","last_seen":"2026-06-07T07:30:11.560478Z","times_seen":10722,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/livechat.ashx?siteId=65003016","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /livechat.ashx?siteId=65003016 HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/x-javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 12:42:30 GMT\r\nserver: Kestrel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: XJ9jaPMq-K6IlwioHR-kMx3an0AD34NED6qtWb92Nie_KnOXzvU7Mw==\r\nage: 80149\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2619,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1083)","md5":"6040dc48164fe6801223cb0b5552952f","sha1":"603fbed8b7a5426e9bbb12e57bc88b7a4758e022","sha256":"7b7da61b69bae4b64fc1637348893c3281091db312f37d19ee350891bbd7ea7f","sha512":"004fc22ca684d867b2cf52f20ab5ae75bc226e1405e12572fab721a02d46ca54d739343907d3eb5bd4316207762f0c928e91718f2063fafa6d0944812b30896d","ssdeep":"","tlshash":"115175e6676e0110073020a99d7b738c98bd91593d4c8c97f8bc922035f1f9f9655ee9","first_seen":"2026-03-04T14:45:19.176963Z","last_seen":"2026-03-05T11:01:01.113173Z","times_seen":16,"resource_available":true,"data":null}},"time_used":881,"timings":{"blocked":438,"dns":125,"connect":1,"send":0,"wait":4,"receive":0,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/fserver/files/gb/752/carousel/10104/1601901887523.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:25.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/752/carousel/10104/1601901887523.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 18 Nov 2022 06:08:54 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63772176-4c5bf\"\r\nDate: Tue, 03 Feb 2026 09:58:29 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 09:58:29 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 237842\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13410802105110838768\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":312767,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3470a2295189b92cae427e53236a80d9","sha1":"b95401f1b4f325f491330a2643129c4c721cace0","sha256":"ce640a7817826ad299f3daa2ef638697e1760800fce3f542c1373186cea3192c","sha512":"9fa1ffcebaf570cc044941f80d9a095c90ad1b0048e61aa70517eb9ef32a64ead2aea86b67560680259c46f9243ad48ce8b52e675b722373995d4c6f2858b4c7","ssdeep":"6144:ffaG4Qnc61tHQJF8T5fOYf2SJD1JNX3RDiQmwZiAachA548ywd:ffaOncwNfOYRJnxiQ/5ry","tlshash":"4c6422501f4369522fe9ab3ff2ffbfb37e0c16108b8495cd4044a6d666ed263c992489","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.552429Z","times_seen":22,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":306,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/sports-test.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/sports-test.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1b1f\"\r\nDate: Tue, 03 Feb 2026 09:58:39 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:39 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 4876\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8427389299924518835\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6943,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c319c2b5f4c601ff4272d3ae35cabb39","sha1":"034a2ddeb04d8f2a90f740add14573e4d68f525d","sha256":"174db0192614a90c63a687ed3446918e0ef2f322512188816d961668ed2fcfbb","sha512":"7fcbcd5dfdf1dd46fe25b58a4f980838d1cba55947ad459a3614e4440a27d394467890545fded067213970572224c11b0297454ed5c204324097d4961067a136","ssdeep":"192:fMEO5XnIOgx0JCSYUArUkjzzzddBSBRy/H/j6lOeku:flO5XIOHwXRzVSB0mrku","tlshash":"c3e19ea47aa7a71d20f4de01bfbb61726d38584b102516f441ab6f873f5038d008eeaf","first_seen":"2023-06-07T12:23:37Z","last_seen":"2026-05-01T19:32:21.621053Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1457,"timings":{"blocked":1170,"dns":0,"connect":0,"send":0,"wait":280,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/game-api/v5/content/sportRecommended.html?t=mmdcr3iq","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /game-api/v5/content/sportRecommended.html?t=mmdcr3iq HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=251410696cadec6a5b6c74aa4706df12\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\nout-line: gb-cdn-801\r\nset-cookie: route=2b8dcfae973a524ce800a350c729cfda; Path=/\r\nsub-sys: mobile\r\nuuid: 00752-01-00000000-1772708301d1c6\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 988\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5491,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"030d4a12ca0684a6b160fee113fa60fc","sha1":"6770b3c0e9f9a96863396e62eeb1faeec009a4d9","sha256":"1ca929e66c184309b55ec579c9e56d82ebeaef9f6fa6e89cb26627953d29a57a","sha512":"57e23be166a2ca613ad6cb348f7a85c6f73e1e73e89f28480bf3477bb9a0c26ecf59cf5edc3629242bafc4121f7416183ab8c7b3149c740819ee3a71e9d396e1","ssdeep":"96:SD6izja65O6Zu6Pi6BVt6cN6rSx6Yt6iSelv76Hnm:s6iC6Q6w6q6x686mx6m6iSsv76Hm","tlshash":"b2c1ab152cc98f84c65367e8a6cf3a8864fed7478ec5ff6d6e8eee3998d92244100705","first_seen":"2026-03-04T19:55:16.214878Z","last_seen":"2026-03-05T11:01:01.068315Z","times_seen":3,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/lazyload.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/lazyload.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 07 Aug 2023 03:05:10 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64d05f66-2f79\"\r\nDate: Sun, 08 Feb 2026 22:43:01 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 11 Feb 2026 22:43:01 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2398\r\nContent-Length: 2731\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18342289264048898451\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12153,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d87854586672bff7f886a47da85da5ed","sha1":"8d0537030dc7a81ade87a41a75fd5a75e4e33da1","sha256":"17859187f895c27de8869fb6bfec579fd68c4588d0af71d08d334be92d144ada","sha512":"d8c3e724f00bcf1ebfe1f8e96dda01243cf22aef18a0fc5a25a42d84458ff58a22a316dabf1d80d1b4f4c28db79edbdf9ba19df755d72f2b0b9f64497137672f","ssdeep":"192:Cdr+EgBD7NiM7B1wV20jSCQrF/bcbe7/bgdCx4RTsmS3KDsS3CggvBSChKRJ0Suk:Cdr+JBDYpV20Ez+obgdsm3ROCJIqSJvG","tlshash":"304200483deb51aba1d3b0f89a5f11447235810b160eee253d6c9395af6093932f2ff9","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-06-07T07:30:11.549562Z","times_seen":17242,"resource_available":true,"data":null}},"time_used":2525,"timings":{"blocked":2188,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_f.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_f.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1872\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 4675\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5313241919462598493\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6258,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"9e9eef0482640f725511691858d9ac08","sha1":"fd2a8540894f585e468911228a7bfd49fa6eb058","sha256":"d2bfe31bbd82b5108d50360a83a2e5b22125e9d18f5d40642b92eddbe1f4cde9","sha512":"975f15005dc96eda245bd0a30bca25140b288c8e0372a8ad0e87c055fec66c6eca1325b2101fa5dc3b041898775535d58fee487e13601faaf12d7636c2c6d59c","ssdeep":"96:iIMSUAeLFVNp6DvfLIF6ehuNHdw23i2nq0aINqxPcdEVuxiqjiElUkseWUdQyz:iISLv6DvEFThu13i2nK7xE2VuweX/snC","tlshash":"b1d19eb9abafb74d1cf1806f2fefb15d725148a2205f08dbf86c61cbd0a19d01646954","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.674047Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1317,"timings":{"blocked":1037,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-hq/navbar-sub-hq-first5.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-hq/navbar-sub-hq-first5.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 26 Jun 2024 06:30:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"667bb57b-1b8be\"\r\nDate: Tue, 03 Mar 2026 09:06:25 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 09:06:25 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9282\r\nContent-Length: 85264\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9223395083023403937\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112830,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1cb5037950c9564d0b3c0f817e99a5b5","sha1":"da90d9634bfb8e8ef447a35d5d6c56649bc458a1","sha256":"e3d5705c5f1a835bfcf8582b91703ba24187ec64f9a1565bda6471dc80cd2d3b","sha512":"2dbf1f0842b9a220ee97ad7a004e4f756932f96ae5c8442d33911bccc2f0bc6a196b7e55c9ce6f37d9ee03aedd09f3ffedff9a5fbe1876a64930d9bcd9e8fe63","ssdeep":"1536:wn06Y6ZI1BZWNvF7wXRghmK5IIsr6SFMRHo+k8XISsoX8sUQFLxAu1Fndta+k3:eYPrQNwRemKuI0TsHNZISsS81Mj1Fnbo","tlshash":"89b312772a94bdfdd8ba44bfe061756b2d5487fa5443c759cec3d30b81a33020a99b48","first_seen":"2024-06-30T10:30:19Z","last_seen":"2026-05-31T00:12:56.790622Z","times_seen":84,"resource_available":false,"data":null}},"time_used":2688,"timings":{"blocked":2408,"dns":0,"connect":0,"send":0,"wait":278,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-chess/navbar-sub-chess-first3.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-chess/navbar-sub-chess-first3.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 26 Jun 2024 06:30:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"667bb57b-588f7\"\r\nDate: Fri, 13 Feb 2026 09:33:26 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 16 Feb 2026 09:33:26 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 275710\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10404607104684224748\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":362743,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c8a85a8020e8706aa781c3e6b9a753e0","sha1":"1fbf24eeb6843533f2ac5a0a023d1b196207275f","sha256":"5bd7b9c0cb963f07fc1fa7265d369ef45a062f0c10aa23a4bdc642a64dcacf92","sha512":"a5b49bc3dd15eeb0016c006967a0996a8d3453e10ac948e088a483e2dbf010056e4ca8187140d5bbfc003600489ca1e7b6e47131edf30b28a2c4ca4faa1e7761","ssdeep":"6144:EO5kbCxmCFU9wycGU9+r3TPayWN7XYy66luigJ1LLwXJb6PBh:EaJFevVUqCBNs6ui6QXJb6P3","tlshash":"887422847f68ff9e191fc3d9138326369dc38cd818202ffa87967d7369b19267218919","first_seen":"2024-06-30T10:30:20Z","last_seen":"2026-05-31T00:12:56.797762Z","times_seen":83,"resource_available":false,"data":null}},"time_used":2777,"timings":{"blocked":2431,"dns":0,"connect":0,"send":0,"wait":340,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-chess/navbar-sub-chess-first2.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-chess/navbar-sub-chess-first2.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 26 Jun 2024 06:30:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"667bb57b-209f4\"\r\nDate: Tue, 03 Feb 2026 09:58:12 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:12 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9280\r\nContent-Length: 100517\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12317901855572154756\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":133620,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"f817d977a782fc3a17c42a083f0d4f39","sha1":"d55cb3a67f77a175757c4e7a2168eb1bf47975ee","sha256":"650dfbe546aba92e04ca86be189569f1c5f2ddb670cd1a268cd92a715763a093","sha512":"7a11b5dac87346db481628ac87f3ecf10b1df7daa817f0976436fe79daca1a7bc02800f2535cfb0f24f5473e4e86d8cc8789849ede23ad8cca1d5fec402041a3","ssdeep":"3072:Wa4BwD4I0QiNZ8QaA/2gpfokOipGljX8uUMpt0Cvs:l4OSzzla2ppwkO2nMpt0Os","tlshash":"e4d302cafd4b2fb22107c2e9188324292e54194fc23ad7be681114e7f51f8d58f9796b","first_seen":"2024-06-30T10:30:19Z","last_seen":"2026-05-31T00:12:56.853159Z","times_seen":83,"resource_available":false,"data":null}},"time_used":3024,"timings":{"blocked":2762,"dns":0,"connect":0,"send":0,"wait":246,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/partner/partner-hongtu-black.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-black.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-197dc\"\r\nDate: Tue, 03 Feb 2026 09:42:22 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:22 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9993\r\nContent-Length: 79254\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4309841990165982336\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104412,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0298fe6d0aa5b489e3cda6cddcc325ee","sha1":"4f7dbdce496c21b36fdb5406592d1ec8f0219699","sha256":"98bd06ca490d5c000e797802b93323fca6de4f672c4a561099bdc6c0d7e0c093","sha512":"a110c084c85583253556ada989851ffe48a9fdfa752976ad7061b230fea6a4d685369a3303d8bea7f27512b35cae4c96d143fe61d275521a8cdcc8c4ac8f9554","ssdeep":"1536:8WIh38q9JcZYHgtwd+CJbHa835EktOC08ltxlgWIIa+uoAwQpqcZCfrW5s4h:7Ih33cyHdNzJwBmjepoAwQAcc4h","tlshash":"d8a3122dfaa06f75da22873f8255dc0481db6196dedba24a02f0ddd8cb4a7374267d20","first_seen":"2025-09-06T07:11:29.245175Z","last_seen":"2026-04-17T04:44:35.203107Z","times_seen":1734,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":319,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_a.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_a.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1f14\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 5943\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5374933341797260123\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7956,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"12fee171e4e939a63539987138f639a9","sha1":"c032e62e1be54e78fa3593a65375b3d7e94c25f8","sha256":"8f3494eb3d923322216594a0da1fec66e0af939dfe389ddcf3adfa89583c397a","sha512":"2c0dc07d03eec7bb1ebe2d3ca815d8402e093d115c617307cc4019e64b82ffbedea19d8d72e45b2f6365bec54024aa8ceb5c346545bb6081dc2394b3523b0596","ssdeep":"192:KISLvfrQfHA81i7wIm0e3tX8ZKtROqR7fuEOcGYqp1Iy5RKs:KJLHrQfVc7c04fDkxYq4yLp","tlshash":"e8f1af2d87e4a92f5cb46f2500167a3138ba4a0afdcd56ef50be0175dcb66e840d336a","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.615879Z","times_seen":21,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/bundle.7126c698.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/bundle.7126c698.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Thu, 05 Mar 2026 04:54:18 GMT\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\netag: W/\"694264e2-9819e\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: -TW1BQuwRTTUFOiZWSJstoje2aWQO1lsciaqMxxFKajGA9iBGaQOCA==\r\nage: 21841\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":623006,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65422)","md5":"03585f467dd1043465e62024d84e8501","sha1":"1e5cf8a55c64abec323fd2af7e5823a22b4c18f0","sha256":"4cbd5c79ff097907e8a54d23154bef1b9b8db97a75ec78fb7f7fbc994e723353","sha512":"3c0bfd9bea584f9bc4acdac9815c499327a54479686c2b5e8189517433d9913de43dea480a34577ca551a0327e4d2cfd2271d6c598d4994b99119261805e46a4","ssdeep":"12288:nAQt366fCmXM7t36yfCNXYpnjhftWhS4V:ACfCZbfCSntwjV","tlshash":"68d41898f081b42856736161b2af360a7236a916ba4d4468f536c1f4bdf60cbd323fdd","first_seen":"2025-12-19T03:52:38.036277Z","last_seen":"2026-03-19T23:48:50.648715Z","times_seen":399,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 05 Oct 2022 09:40:30 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"633d510e-7fd7\"\r\nDate: Wed, 04 Mar 2026 23:46:48 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 23:46:48 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 1838\r\nContent-Length: 5207\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4822574123775907781\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (801)","md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.487698Z","times_seen":17749,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/menubox.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/menubox.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 26 Jun 2024 06:30:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"667bb57b-6cf\"\r\nDate: Tue, 03 Feb 2026 09:58:09 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:09 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9280\r\nContent-Length: 968\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12481950476535809549\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1743,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"358f7e6e8281941c774873fb29274518","sha1":"68f14e709171c409bcb14b57a95aab5bf28046ea","sha256":"37b4a067aaec0150b04363090c599e1894d4d24310498cef68971120e09f1d06","sha512":"5afd74834b43a93e59791e37ed8f81e0960a482980817071743e93ffe8eb10987e320d6550e043778f1e1e09cba68f9a493b102c7a8e8944756d0ddc9172147b","ssdeep":"","tlshash":"e731b73f3b6e258c48d48518fa9990ba38560ad8263625f5d86c201f5749b340dd2afa","first_seen":"2024-06-30T10:30:19Z","last_seen":"2026-05-31T00:12:56.795342Z","times_seen":79,"resource_available":false,"data":null}},"time_used":2049,"timings":{"blocked":1805,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/themes/images/hongbao/icon-close-1.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/themes/images/hongbao/icon-close-1.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Aug 2024 04:00:08 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66b2f148-2023\"\r\nDate: Tue, 03 Feb 2026 09:42:22 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:22 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9652\r\nContent-Length: 6277\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4473451800400895147\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5ff41d2becd0689589fd8afb58c0913e","sha1":"9f463b57b27260b19c93d533046f893360933d76","sha256":"7f97dfd7455fb76be00f454b95e3b28c114f9164b49a504bf34200da41d9db8d","sha512":"d502dc1bf29166726ba9183c01efa1b698dcbf22d79de614a4772b4150add3f308d597732844c9febef77b1d85568604b729f2c16e4c66f2f86b0b724fdb4d72","ssdeep":"192:JkkBHNqwnjSJuxF1drKn9K79LDQXFj4NLaYQ7ar/:rBHI8BHkn9Kx4+LhQ7ar/","tlshash":"4d02bf013bd42b6a1dbb10d3f1684da88c83819232f43d99371fef7b658812c6253a68","first_seen":"2024-08-07T18:17:10Z","last_seen":"2026-06-07T07:30:11.528883Z","times_seen":9329,"resource_available":false,"data":null}},"time_used":3212,"timings":{"blocked":2968,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/fserver/files/gb/752/carousel/10373/1696695941457.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:22.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/752/carousel/10373/1696695941457.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Oct 2023 16:25:41 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"65218685-e9ca1\"\r\nDate: Tue, 03 Feb 2026 09:58:13 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 09:58:13 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9279\r\nContent-Length: 717626\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12993651614850148468\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":957601,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"83a81b5aba36b76532393ca0c50d07aa","sha1":"fbc42a5b0b689efe100939c6be04848eec02c328","sha256":"40ef6f13c84bf1c660e8507777da73d1fae322ca180455ef61d0f257eaa6d943","sha512":"612479ef002876b06b63430e0b595a9766b2b89ffb15929a102027d98877fdd43dda0d0dad940aa30071a9fa1d9e38d127b27f04e45ba170a89ae2990c1c5759","ssdeep":"24576:xJffl4kXutxkFVj+I7loLebppQ6BMOS2E:xJjth7+e9y6s2E","tlshash":"a0152330ef683d724f0c812e613b7e265bb15ee5d64d918b83f369d006b0792da17e58","first_seen":"2024-07-11T23:45:32Z","last_seen":"2026-05-01T19:32:21.638993Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1002,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":300,"receive":702,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_f.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_f.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-294a\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 7954\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6753843922340177154\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10570,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d574212ee78ac142f84013fa0e813fa9","sha1":"c4726d08dd1224bcf86a0fabe4b05f4918046dab","sha256":"7b6760eee7e14a8142017a76a44dd8860dcaf7813f2f339bf13ac790de2db66c","sha512":"22f41e708d7c5ae4aa145b8874bb0b0056e092579a9a785f9d2c575d265231a4c49152ef261cabac80032c7d010e9563c433651a7b7e6dbc2762a83952b21ae6","ssdeep":"192:AISLvhw6saY02oTniThh1duFK0V5/QIe7N3pOd26Wzgfk/Il/u5uXfQ5qkYMksq:AJLJw6sanhTiThh3uo0T/HeyBcgduyyU","tlshash":"0a22afbb5586d46f28f59e8c822c1a35f56c51ed785374af189f12e180fd310127e9a2","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.670312Z","times_seen":22,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":299,"dns":0,"connect":0,"send":0,"wait":244,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_e/icon_a.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_e/icon_a.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-e9d\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 2761\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17691538901304303193\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3741,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"860529bf202dbad198e3f70b90e2a5b6","sha1":"f413096f2b7b8cf856f781b239389eb1c84a0f19","sha256":"b7b836a3bd10b9a91cea2eaf1bb6c30f122d42701388874766177604251c2d7e","sha512":"8ecaca5b5f0d82b30e32a940a75de44b7660a6bf8fa941f4c90f0d4a35faaddd996e9d39ffd1a287955f7f3528b0b4803b930523d9efaee0999b6dc299efb82d","ssdeep":"","tlshash":"79713b3d1b6a7c1b5433835d82d52723253a401b1a4c3aecc83d68de8953fa412a1ada","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.617455Z","times_seen":21,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":472,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/index/icon_a.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/index/icon_a.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-11169\"\r\nDate: Tue, 03 Mar 2026 09:06:31 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 09:06:31 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9277\r\nContent-Length: 52880\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11670872258075877236\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69993,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5d1e109bfd5550cb56713c55a51ebfe2","sha1":"179acbc9790e2a0392c4bb3c33aa8b87a9cf0e49","sha256":"dd7065e8c2a809fd79bcd015f576a5e0c723466154ce32b6016d9cab9c700af1","sha512":"452b79d925b7cc378db1dd4d29cba6146b57dcbf9922d22b1e14d2cbf55f3848534a38ca1fd6a067ce6cfc487003f3cc592eda6948e0c5bcb3497a84d299753a","ssdeep":"768:bvIf2anWetLTWXJ+MfhGl9p9bGYckrTIuWiEFgYhEqm/GD6VdGbCJQSlIn4pJokG:TImetXWZfXFkZWepTaKy+0G3yC+7","tlshash":"006302d153132c322b8023be04d7754ebc08ce7b2a9dd223628171d62ad6deaf6475bd","first_seen":"2023-06-07T12:23:37Z","last_seen":"2026-05-01T19:32:21.619666Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":770,"dns":0,"connect":0,"send":0,"wait":273,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/mobile-api/v5/chess/getActivityMsg.html?function=sign","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /mobile-api/v5/chess/getActivityMsg.html?function=sign HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=44d17259ab44b1b54887077d522d7137\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\nout-line: gb-cdn-801\r\nset-cookie: route=c7419011ef227a9b9406a6c2cd9b5007; Path=/\r\nsub-sys: mobile\r\nuuid: 00752-01-00000000-1772708301811a\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"5d062bc93ef9d75b27e852ed745d170f","sha1":"1ecf82a0589608b26ee6a29b2cc3229916596626","sha256":"26e77aa8c61c230db13c8fd74d4ab3adf8be54c3192c4e16f94e633a71efc2e1","sha512":"44400ff6867b380b16fdfda60ff144dfcc9bc4d7adc38c84a98f20d2a8911304f694eca3afe2cf9ce9538a7c49b1fb471694b4b68215c6ccc6027571b8b5ac34","ssdeep":"","tlshash":"f2c02b86f21818b38b030bd010e83d41c3fd11b2c0c84848dc4c8e4802b48ffd301837","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-06T23:51:10.815511Z","times_seen":7427,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"manbetxss.com:8989/fserver/files/sportTeam/football/es03.png","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/es03.png HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=2b8dcfae973a524ce800a350c729cfda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Thu, 05 Mar 2026 10:58:22 GMT\r\netag: \"5bed35ce-758e\"\r\nexpires: Sun, 08 Mar 2026 10:58:22 GMT\r\nlast-modified: Thu, 15 Nov 2018 09:01:02 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 30094\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30094,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"26bf2fa307251ba01bb67df2d1484519","sha1":"7f5b7d7f10a84a3508a4bb47e984e926732c9914","sha256":"b6b2b50c69e54b2966f477950d4804db0ab6900781b7535901117afbbbd88b10","sha512":"6462fd3c10c5de5b4beec6f1690b62360e47ae99807f02dba0283d4b25e75861b18f045f678fa59f20809c20e98640aba8444472bb50636b6c908c430d1d2f24","ssdeep":"768:HCeOtGBrYJdusUSSiNNXcIiKnJZ3XQEaDGngoAv:i4BcJFpNXcIdjnQongoAv","tlshash":"3fd2f1c956ca01004ec0f9a536f36f6683208add895bb20f9886f5b75103c66d27bedb","first_seen":"2023-05-13T20:10:02Z","last_seen":"2026-03-05T11:01:01.060141Z","times_seen":680,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_e.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_e.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1d3a\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 5601\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17049488575471408251\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7482,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"63ff36399b15923983eb0bed200648d8","sha1":"3b6114bf6e97c3b98b54ad2492426da859e635b6","sha256":"89ec5b52d906a484899b58cc98c24e07cdc4f6218a78d4441a638bc25d7c888a","sha512":"0109cd9ba5c626d84ef929a3bfa54d71b9d927504a85a3a2696a38f879ca03953547ec60614664b15eb58f3c9e176badba8901379ddf2d6add46e4137962c309","ssdeep":"192:PISLvkt3Smj5fxo3OodxNnWEalJcCdpRkDOfRqQi:PJLst3SmlfxlWWpFQ0G","tlshash":"2cf19f1ffcd6640d0830c168d59158c79e8f5cea29e31a05c58e6325cd56f186687fed","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.616401Z","times_seen":21,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":278,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_d.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_f/icon_d.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 30 Oct 2023 02:30:07 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"653f152f-dae\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 2720\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9929904942390945227\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3502,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d392fcd967338f38b8fecb0a6bac0925","sha1":"f7255370ff24393dafe98b030f6c559e146d77b7","sha256":"b1522edb4928e3878c96eee698f909f924808b1894880c8b91ba940ca45dd0ac","sha512":"d37c125ef0f51638473b9ba1c564a4ebd0193c94e014ee3ead25d93c41e38b6d8537355fcbdf46957d1eda3115038600f5cc8028c611b25a0c5709e157f216e2","ssdeep":"","tlshash":"0d715cf62edf19b60e23097a8e711953ac385d084b5df839c27edbc5cc2f1628092d88","first_seen":"2024-07-11T23:45:33Z","last_seen":"2026-05-01T19:32:21.587751Z","times_seen":21,"resource_available":false,"data":null}},"time_used":900,"timings":{"blocked":615,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/favicon/favicon_752.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_752.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 05 Dec 2022 08:15:08 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"638da88c-d34\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9277\r\nContent-Length: 2485\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9153939049498241366\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3380,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"a689115c581452e5e1849d14b1509243","sha1":"fb156ddb4949dd49c5060a5c68a1af1f206ed48e","sha256":"913f73a3876446d559765631974553443549c798c81eaf4573f8d4f2babf1d31","sha512":"bd0e95b48626a040ce785fc61bdd367545370cf9fc985585435cbc7723c8ac1b4abf8999580e06432541aa0bf868572a268cf605c82f74ccf5567402b86fa155","ssdeep":"","tlshash":"cc614c37738d3c2a1ae84d9da0aa564b3ff59a6b5ea75f35d02d19831078f9c40c044f","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-23T08:38:57.887449Z","times_seen":26,"resource_available":false,"data":null}},"time_used":963,"timings":{"blocked":716,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/fserver/files/gb/752/Logo/1/1577453539061.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/752/Logo/1/1577453539061.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 18 Nov 2022 06:08:30 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6377215e-3885\"\r\nDate: Tue, 03 Feb 2026 09:58:36 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 09:58:36 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 11011\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 554026660976166346\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14469,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (14468)","md5":"84d926e573341cb388a39cd634579083","sha1":"feba371cc76b63e4dd795ee7d5eb6e09a771bac7","sha256":"cb75a1550e2e0b06943d42d5aa5e766aeefa2478dd248c429d7cc7f8ea8ac2c7","sha512":"4f71e052813af17c5967746f6e60b24acd76163a532113da494d45a022485fc6cff4e371db8e981515f4d21e1d65b6470e69d262ac40179f12bfd711c3c0f390","ssdeep":"384:/hOdbdl0Vl2so2CxpUPdqGgwxP5YjEt5oEBf1b:/Qb3NetlPao33BNb","tlshash":"a052d07f7dba1c9ab12c53a3b4d30935384dcc3680dc1c29e76b656b7ec2aace220155","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.70757Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1588,"timings":{"blocked":514,"dns":1,"connect":253,"send":0,"wait":558,"receive":1,"ssl":259},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_d.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_a/icon_d.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-16b8\"\r\nDate: Mon, 02 Mar 2026 04:50:46 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 05 Mar 2026 04:50:46 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 4288\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1786865052698111911\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5816,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"59c688c080577c19038ac57fd2095d03","sha1":"ffc610fbc88c3be1d295e4aff206a90a00964fcc","sha256":"d614ea0da91c181f4e7e0b3fe7e1b6afd46d92603ac2fd840260af15f95ec95a","sha512":"b771c7156816eebec5d738ce41849efda6609bebaf3240624b7b0a8fa61840865cdd849d3482cb518b2faf26ebe96d979bcab2e83c51dff0acf54ae442d8e4b2","ssdeep":"96:5bIMSUAeW3hSoY506Yto4K87w/+PNKBjjO2EKSK472sO9SvKMU2HbCJnOJ/nPrmY:5bISW3hmS6Co4o/+sjjBkZ7tOIyz79OZ","tlshash":"14c18da5f3673b89416c0904affdc416bdf74e2f9c91008f2a38b21b899256175853ef","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.600085Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1261,"timings":{"blocked":577,"dns":0,"connect":0,"send":0,"wait":375,"receive":9,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_f.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_f.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-294a\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9272\r\nContent-Length: 7954\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10842224978615550788\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10570,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d574212ee78ac142f84013fa0e813fa9","sha1":"c4726d08dd1224bcf86a0fabe4b05f4918046dab","sha256":"7b6760eee7e14a8142017a76a44dd8860dcaf7813f2f339bf13ac790de2db66c","sha512":"22f41e708d7c5ae4aa145b8874bb0b0056e092579a9a785f9d2c575d265231a4c49152ef261cabac80032c7d010e9563c433651a7b7e6dbc2762a83952b21ae6","ssdeep":"192:AISLvhw6saY02oTniThh1duFK0V5/QIe7N3pOd26Wzgfk/Il/u5uXfQ5qkYMksq:AJLJw6sanhTiThh3uo0T/HeyBcgduyyU","tlshash":"0a22afbb5586d46f28f59e8c822c1a35f56c51ed785374af189f12e180fd310127e9a2","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.670312Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2145,"timings":{"blocked":1901,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/unLogin_hide.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/unLogin_hide.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-649\"\r\nDate: Tue, 03 Feb 2026 09:58:13 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:13 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 1295\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1451058038308578518\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1609,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5880b8add0fa453a70a7ebb203b809ce","sha1":"74427caec8c4808e7a90d2f81e4347db46f70974","sha256":"56bb0da2aa744d9ccf04624c9b13307b920667188e3dec5f12cb816d2090e641","sha512":"85c7a554c94cff619c16423730940a6b22630ccdf161e4574f6737adb1c49610b25ed7d400686eefe81f3e44f7c5fed7f123e2640f4dceb84aa9824d1fdfe5b9","ssdeep":"","tlshash":"b7310ad79454ab65e778700ef26d75986f272819142ae8d1b5168ac471960403f82d93","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.634729Z","times_seen":22,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/common.032d44c1.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/common.032d44c1.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Thu, 05 Mar 2026 01:50:31 GMT\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\netag: W/\"694264e2-1b420\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: WgbmAmZTMEmH8mIj2yMQfRDAUYM2vU7ZgxzY_-eQCXCuq2Sj8dvAnA==\r\nage: 32867\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":111648,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61590)","md5":"4d90fe732a8918235001f90a280ee3fd","sha1":"7e16f5554ebea2306f378b175c18457aed09bc22","sha256":"35d46a2ae61a964d46b8d668fa0d32e3cdb9e975f848692ebc12916b32078e5b","sha512":"0600dab872d39f5e780664b3c654b854568548399779eb614e286d39cc74030f40c63703c08161e995f45aba2aa8c9413a64b7938d81cb20eebe1dd84c8a98d6","ssdeep":"1536:9QARRaYYKZIknaW+lwfZA/AHJQZ1WpbuRIRoxkpV48KbnmrbB2L:93ZIkaWAw7KbqbB+","tlshash":"b2b33afb73c5b2f44143eb64e41b6410b42e3cbe7f9587d48255cee4b9b0099898ee98","first_seen":"2025-12-19T03:52:38.055006Z","last_seen":"2026-03-19T23:48:50.675664Z","times_seen":399,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/icon-shake.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/icon-shake.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nEtag: \"63b91f87-3e9\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 1001\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10788834441889794920\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1001,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7c70b2bb5e1a7073a2e355248c15fdd8","sha1":"11afb6d25c950cdc0fd9f6836b837750c95017d8","sha256":"ed3fbde5ab8d9f245f731d1b482e6fd8a8bc31d01e127bab1ad8d8e5a4279aff","sha512":"83a38dd8b09cdbdd2855e5e4f44d70c869206831051cfca883161cd700233b447d6cbecd36d21dcc0dc6831367f28014f51c3cd8d78020c73cee6c5260558c34","ssdeep":"","tlshash":"f71186b01f11990e06b219e03969f49b1c861d67520ae934af0af0ca05c9066b2d4781","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.70876Z","times_seen":21,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":717,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/moment.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/moment.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jul 2023 06:40:10 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64b633ca-1cab9\"\r\nDate: Wed, 18 Feb 2026 22:08:57 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 21 Feb 2026 22:08:57 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2398\r\nContent-Length: 26968\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9525170281621663364\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117433,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"36c8f828395a9395549bd6e7307cb7e9","sha1":"f30a4961558e2d3d4405e7d93aa28fdb63245e78","sha256":"5d5e32fa1e06a0bc9396f349d142ad248e82086543e438c890e43f41e692db33","sha512":"40c24a9011e1bbdd98bd95b341c400bdaf48fefd953fcb407368fe3c685ac09196b55e230c03ca9890c35fe9acef2c916bed52423dc1a7b532a1db9817c03a8e","ssdeep":"1536:qOL1yBkBeb9wNoHpH7tjl2Ulwjwaj2BH3fMobEKeYEoZYiMirUw0:qOCWeH70R2BkobE+cw0","tlshash":"aeb35f5a59e31023496362294fdf2011ba388123590dee487d8da3d49f9ed7c47bafec","first_seen":"2023-07-29T10:21:40Z","last_seen":"2026-06-07T19:03:26.50069Z","times_seen":17486,"resource_available":true,"data":null}},"time_used":2995,"timings":{"blocked":2698,"dns":0,"connect":0,"send":0,"wait":295,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_e.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_e.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1d3a\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 5601\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5124333163282420213\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7482,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"63ff36399b15923983eb0bed200648d8","sha1":"3b6114bf6e97c3b98b54ad2492426da859e635b6","sha256":"89ec5b52d906a484899b58cc98c24e07cdc4f6218a78d4441a638bc25d7c888a","sha512":"0109cd9ba5c626d84ef929a3bfa54d71b9d927504a85a3a2696a38f879ca03953547ec60614664b15eb58f3c9e176badba8901379ddf2d6add46e4137962c309","ssdeep":"192:PISLvkt3Smj5fxo3OodxNnWEalJcCdpRkDOfRqQi:PJLst3SmlfxlWWpFQ0G","tlshash":"2cf19f1ffcd6640d0830c168d59158c79e8f5cea29e31a05c58e6325cd56f186687fed","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.616401Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1607,"timings":{"blocked":1308,"dns":0,"connect":0,"send":0,"wait":298,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-chess/navbar-sub-chess-first4.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-chess/navbar-sub-chess-first4.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 26 Jun 2024 06:30:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"667bb57b-51667\"\r\nDate: Tue, 03 Feb 2026 09:58:10 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:10 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9281\r\nContent-Length: 253311\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12800086103395131695\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":333415,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2b543a877fb504d7470cef814ae713cb","sha1":"fc116d4918de1a6685a7c8e86920958878b72ece","sha256":"2810bf5714adad0f97a50125672ed2170a0e54f21dc731aaa91391d710b5d9f5","sha512":"1957621476b54ddd564c06226ef46314393f45cfcc4e704420ad9b2722294cc88b46b75028bab17517dcac66a6f47b4166940db95888a67ec76d8f2eee10209b","ssdeep":"6144:3/hAAHlJGxlMdNC3uuRinnwb2gWcDHzgjYcfZCuDadtKrvw7v0T:+NlMHC3l0wqg7DTQYchyoj/T","tlshash":"7d6423b8ef121b4fcee6771d600856d102ed6ec8947d68d1eac61ce7281ee8041bb979","first_seen":"2024-06-30T10:30:19Z","last_seen":"2026-05-31T00:12:56.814789Z","times_seen":83,"resource_available":false,"data":null}},"time_used":2495,"timings":{"blocked":1977,"dns":0,"connect":0,"send":0,"wait":240,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/index/getUserTimeZoneDate.html?t=mmdcr2rj","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /index/getUserTimeZoneDate.html?t=mmdcr2rj HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=44d17259ab44b1b54887077d522d7137\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncachettl: 3\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Thu, 05 Mar 2026 10:58:20 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 00752-01-00000000-17727083000e46\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 97\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"96075b529766f9b4554de0c705dfc161","sha1":"ee8f4f5e497b1ae81617200914c862f543db02c3","sha256":"b478aa549d9d7b8deda51a4adbceeaa64c3b4cb0b1d469936862fce559d1a273","sha512":"c1ec662e4ac5d1409ff7a4b10882ce2fc22660ab517942ae92a70ad311be3de7cf4c09d5cd0ea4940f7996c225a1f5cc22b13bbd60f797c3fc399abef47c295c","ssdeep":"","tlshash":"b3b0922449e66e1e192480a4ca68b4cd0929752b98c2e6601ba7ed1ca499aa92809712","first_seen":"2026-03-05T10:59:01.589652Z","last_seen":"2026-03-05T10:59:01.589652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/partner/partner-hongtu-gray01.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-gray01.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1a1f6\"\r\nDate: Tue, 03 Feb 2026 09:42:22 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:22 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 10987\r\nContent-Length: 81241\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 613871733584300070\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106998,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0d835d7c8082eee7f89f0b1b2e62f4e4","sha1":"0faf9149c454be0261eea8b14afaabb70a6bddca","sha256":"a5f8a8d222b97704ebb832a6c68228b835c7d40fabd508de50d662e8f1add6ce","sha512":"c3a9d53a1cd3b51fa7b5af588085dc2ce8de1d0ebd7a86b151f90564dfc120b31be5a5519950265b4b511b7e1b80e5d5e3938104a8cdccfcfce626e5de27f372","ssdeep":"1536:AxJxL2StOAnubXwaS8BIunTHYHwpjLao55e39o8/mamUX1eYPo6uXyQenBV7/XAd:kKuqnbnbKwBw68+amI1eYg6fBVjg","tlshash":"daa30234d3a4f6d50ead035ee525f92c9e4182a74024edc9742b2cd382fd1786e10bde","first_seen":"2025-09-07T00:50:47.554845Z","last_seen":"2026-04-17T08:59:04.344356Z","times_seen":1764,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/index/icon_c.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/index/icon_c.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-80e5\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9277\r\nContent-Length: 24840\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7024315170909504330\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32997,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"3a635fd985551ab0b19edd0cdedecc5b","sha1":"d14708377436fdf238bc760c666f1f7085cda134","sha256":"82a506403a06836d8c9184e7048018d56d84442dc748db8adb30bd9c1f268346","sha512":"1049bcd2b71d2e34b1fec8e2a5acba5c403903b9ce241b4f4c61698ab3d8bb13ec155c355aa71d8ae5cbd16c973280429fc154ab0da59158c4f0fb7c4f02c68c","ssdeep":"768:mt2rY5MX8NWIG6AtUhD66wbArctTd2wlkG2XzA+5+UG:q2rYmsy6A+tykrqd2DG0x0","tlshash":"f1e2f1beb34744be7404e14ef42f74d86e156cd366e7538e181974c0aae9676c2e09c8","first_seen":"2023-06-07T12:23:37Z","last_seen":"2026-05-01T19:32:21.689325Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1204,"timings":{"blocked":958,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otdho.z5bu9ne7.com/campaign.ashx?siteId=65003016\u0026campaignId=1f5924bb-a0a6-430b-81ca-42321a46cffa\u0026lastUpdateTime=000000002ABD043CsimplifiedChinese","fqdn":"otdho.z5bu9ne7.com","domain":"z5bu9ne7.com","tld":"com"},"ip":{"addr":"3.33.255.186","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:27.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.m1nkk57l.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F9:FD:D6:B8:4E:0B:44:8E:28:48:75:D1:8B:6E:74:A7:DC:BD:45:E3","sha256":"C9:1A:1F:97:F8:66:C4:1B:A7:BE:A9:A0:C0:09:8A:63:66:A3:DC:F1:FF:69:58:2A:3F:DB:01:53:B9:B0:71:B7"}}},"request":{"raw":"GET /campaign.ashx?siteId=65003016\u0026campaignId=1f5924bb-a0a6-430b-81ca-42321a46cffa\u0026lastUpdateTime=000000002ABD043CsimplifiedChinese HTTP/1.1\r\nHost: otdho.z5bu9ne7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 10:58:27 GMT\r\ncontent-type: text/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\narrserver: chatserver2\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15033,"size_decoded":0,"mime_type":"text/json","magic":"JSON text data","md5":"59275dca2ac9ec5216f5c51b0a06a48f","sha1":"36940bae78018bc40274c8359d1a01110c1ebf0a","sha256":"6517d148177a5ca5bd793dc03d69c02ec7f86e7a4ba7773dd786a45cc762edf5","sha512":"84f2c706b44fb8965ba46dba499c54bd04d7f59883d4fe6574f92ed17b62bfac2bd7da94708a7ccfe40f672852647df6cdb9c68a895307033e34ca2b35865c92","ssdeep":"192:20bpkqufwAXyjosJrNQicnh+6YF0cOx2fwAmjMlZxW0bCCXkYj1cvyJ:2Iaquf1cDrNQicn2F0cO2f1kMlqICI","tlshash":"c9620a724248cf9d831150c12257b33d3445529fdda9bcbdf3844a769fcaa8bd222acb","first_seen":"2026-03-03T22:05:42.222025Z","last_seen":"2026-03-05T11:01:01.069931Z","times_seen":9,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/websocket/Comet.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/Comet.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 19 Jul 2021 23:50:13 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"60f60fb5-43bc\"\r\nDate: Mon, 09 Feb 2026 13:24:13 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding, Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 12 Feb 2026 13:24:13 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2397\r\nContent-Length: 4031\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4874500896522859988\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17340,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1008fe6a5e1a182d7775963b85405bb2","sha1":"e174a7b08cc3cb5545af1cd33d2814e604119392","sha256":"7479f6f22194ac37dd6d3f5a579b4682ac8dcb6389fb961cf4140f3fcc707a20","sha512":"26e07821ee1e8e94c4bada028e049df7572cac06f2e8dae958baa7a011eb201a6a1d4ed0cfa15017a3f52a0cb949343de0b33ca6da7c245f763c86d5adfb0223","ssdeep":"192:4Pf+aTbLSru4NyRs8VDv1KygOdWuTyVC3d7QPXLHOm8cSCl1Ej7bY8l7YJIJvO5N:4Pf+aTbe4M2cXzsjDUfj","tlshash":"ab721e4a2cf76086552732b90f5f64543235a8172605e91c7dcca6e08f98b7c1babff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.494719Z","times_seen":17452,"resource_available":true,"data":null}},"time_used":2284,"timings":{"blocked":2006,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-hq/navbar-sub-hq-first5.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-hq/navbar-sub-hq-first5.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 26 Jun 2024 06:30:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"667bb57b-1b8be\"\r\nDate: Tue, 03 Mar 2026 09:06:25 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 09:06:25 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9281\r\nContent-Length: 85264\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4742696320981601837\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112830,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1cb5037950c9564d0b3c0f817e99a5b5","sha1":"da90d9634bfb8e8ef447a35d5d6c56649bc458a1","sha256":"e3d5705c5f1a835bfcf8582b91703ba24187ec64f9a1565bda6471dc80cd2d3b","sha512":"2dbf1f0842b9a220ee97ad7a004e4f756932f96ae5c8442d33911bccc2f0bc6a196b7e55c9ce6f37d9ee03aedd09f3ffedff9a5fbe1876a64930d9bcd9e8fe63","ssdeep":"1536:wn06Y6ZI1BZWNvF7wXRghmK5IIsr6SFMRHo+k8XISsoX8sUQFLxAu1Fndta+k3:eYPrQNwRemKuI0TsHNZISsS81Mj1Fnbo","tlshash":"89b312772a94bdfdd8ba44bfe061756b2d5487fa5443c759cec3d30b81a33020a99b48","first_seen":"2024-06-30T10:30:19Z","last_seen":"2026-05-31T00:12:56.790622Z","times_seen":84,"resource_available":false,"data":null}},"time_used":2231,"timings":{"blocked":1973,"dns":0,"connect":0,"send":0,"wait":236,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/partner/partner-hongtu-blueGrey.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-blueGrey.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-19f49\"\r\nDate: Tue, 10 Feb 2026 01:03:39 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 13 Feb 2026 01:03:39 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4658\r\nContent-Length: 80698\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 637131936219830595\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106313,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"37075466e8ede9937505a62ba591f77c","sha1":"46052e5f69ce3e53d15108e272c2a76dbfd02217","sha256":"3ff5df0b6596fa59aeeedd78fa1586a1ecd3749e70cd3e294c20888bca51851d","sha512":"ec78c9a7b8c0c6a83178da914e6dbf5fec3d6ed3dac5519385845a9b23d21027af90d0cd86ed2a3f337effcf09fbac31baaabe48696d0746e3e919342f7828e1","ssdeep":"1536:WWW522aOYO4kezvJYez8ZJ073qeCzSyqmxHW6iP2nPjm:WWW522dYnkeO08ZJ09eSHmx2TPOPjm","tlshash":"1da312581fb326ed956e424c4df9e5f1d42e60c291e2a2050fa0a3e2fc3c04785e6ee7","first_seen":"2025-09-05T06:26:06.67207Z","last_seen":"2026-04-17T04:44:35.189692Z","times_seen":1747,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/fserver/files/sportTeam/football/en11.png","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/en11.png HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=2b8dcfae973a524ce800a350c729cfda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\netag: \"5beb9c4c-5555\"\r\nexpires: Sun, 08 Mar 2026 10:58:21 GMT\r\nlast-modified: Wed, 14 Nov 2018 03:53:48 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 21845\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"249225e8af0a72a2ea6390afe5672f1f","sha1":"e61a16997a24337a16e27be4cd8e87840760487d","sha256":"426ddf3584e1c7bee6ebddff437b55f5202c03086cc4c53a538f1265e87c0d3c","sha512":"f5e5820bd79fe0c9c9c45cb3a6719820f0c4cb4b3eea05ae27d180747a2e78506a0eb2c46ad1166ef01726a015cc06574ca27afbb65b564aa72df9357b3d4a5e","ssdeep":"384:k2NaWwltJBRkNxsBQQemURDcEnr9njfMYakatIjwLcUiqtHmptkoqUSY:TN4ltJoTrQ9URDhnRnj0sa6jGcqcJSY","tlshash":"14a2d0e6e52af450fde1de519d3b90c11a4e2d126c4323ce9428dc7ebb023de69a1db1","first_seen":"2023-08-13T00:52:21Z","last_seen":"2026-03-05T11:01:01.076717Z","times_seen":618,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/index/icon_d.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/index/icon_d.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-36b22\"\r\nDate: Sat, 28 Feb 2026 17:19:18 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Tue, 03 Mar 2026 17:19:18 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9277\r\nContent-Length: 170380\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9380083372973875317\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":224034,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c2a70bd0a0fdb96df1a3abeb134c8179","sha1":"ca7a90310f353018c5cbdfe9ce85452bbf426459","sha256":"9f5118d033057ab2a613c202bb20018b696a07797b534e40b98208b808dba2eb","sha512":"45fe59ffd1f8ec7d199766187c6b8408eaf958b79b79db786c369ce93d153e08ba7d9ba9801fdad46c1437b6c98bcc03f5dbf9cc09facfccf9bd0247476a057a","ssdeep":"3072:mezv8Utqe9i3qIm7RIEQmAnNWwK+pO/BJPXmuwNdIQh7xRuofyf55rkQArq1jhYR:DXHCq9IuAU+pOZJPWbbh7Sb37kqN7Xo","tlshash":"6824121899a52db177e8426813cd843d9b78f06bb08145daefdfb9cb90741857ca3c6c","first_seen":"2023-06-07T12:23:37Z","last_seen":"2026-05-01T19:32:21.675718Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1290,"timings":{"blocked":1040,"dns":0,"connect":0,"send":0,"wait":244,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/jquery/jquery.mailAutoComplete-4.0.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery.mailAutoComplete-4.0.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-102e\"\r\nDate: Thu, 05 Mar 2026 05:23:17 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sun, 08 Mar 2026 05:23:17 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 1715\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 162990858723476083\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4142,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"08e5a86e482c2cacb81fefc656248104","sha1":"80a09e4000e7a2305498ce1a99b8f52991cf2e1a","sha256":"b976748094d2676273e388bc3632321d9c8e44e191a0cb69c87779a933ee1650","sha512":"0a592cd1b909bf4aebd2cad4c4556fc4460aa6ed0aec0fc642374dafeb9924929d80e167d1f45d9e5dd93210af8de69840665963bc71e2f0b3a261b970b7a5f2","ssdeep":"96:ZaN1VI9nylyy+B6hAnlA4xmsKVwH1Dsejz:ZAzCnyl+BpFmstH1Z","tlshash":"c88122a0f35c91f7059e7213654e5acd91be40bb5c1529afbca05a0c38f8daa232dc7d","first_seen":"2023-05-18T23:52:16Z","last_seen":"2026-05-28T12:49:52.674633Z","times_seen":111,"resource_available":true,"data":null}},"time_used":4179,"timings":{"blocked":2791,"dns":0,"connect":0,"send":0,"wait":1388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/common.032d44c1.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/common.032d44c1.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Thu, 05 Mar 2026 01:50:31 GMT\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\netag: W/\"694264e2-1b420\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: t0RcgD-cgALbb1V8o0IyRV8tll_I3geGY_S8jtW19HK37zu8UvMSyw==\r\nage: 32867\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111648,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61590)","md5":"4d90fe732a8918235001f90a280ee3fd","sha1":"7e16f5554ebea2306f378b175c18457aed09bc22","sha256":"35d46a2ae61a964d46b8d668fa0d32e3cdb9e975f848692ebc12916b32078e5b","sha512":"0600dab872d39f5e780664b3c654b854568548399779eb614e286d39cc74030f40c63703c08161e995f45aba2aa8c9413a64b7938d81cb20eebe1dd84c8a98d6","ssdeep":"1536:9QARRaYYKZIknaW+lwfZA/AHJQZ1WpbuRIRoxkpV48KbnmrbB2L:93ZIkaWAw7KbqbB+","tlshash":"b2b33afb73c5b2f44143eb64e41b6410b42e3cbe7f9587d48255cee4b9b0099898ee98","first_seen":"2025-12-19T03:52:38.055006Z","last_seen":"2026-03-19T23:48:50.675664Z","times_seen":399,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_d.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_d.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1d3e\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 5602\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6157129581669345452\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7486,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2e85397b8d046fdf68f0ac8998343bce","sha1":"add3f158cb21f394d9ddc017b50c78c12f6e664e","sha256":"1d521306ad5a4f737f69a89403b7107e2445aef1da37f8d1a89f4b625f29e26f","sha512":"132e9fc58ad255216dc43aa09eb08a20acccbf4d795bf80a3c0bb4b81ce3d9524a7c42985b3db4ac9384c4da41ed56d8ac531872ffc3e10d9d1c4fe7f7a395e9","ssdeep":"192:vISLvnEZqjXAQOF6OuCJnOSexfJht/G+HguvEpn2:vJLPljnW6OuCJnOpJrG8guMU","tlshash":"eaf1bf374f580c2f21712b8456be013ffd2a5e2c089a3bbbc924685e9a31f0c1055ee9","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.628962Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1548,"timings":{"blocked":1292,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manbetxss.com:8989/headerInfo.html?t=mmdcr31h","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:20.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /headerInfo.html?t=mmdcr31h HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=44d17259ab44b1b54887077d522d7137\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Thu, 05 Mar 2026 10:58:20 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 00752-01-00000000-1772708300d5e0\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 116\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":127,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"2849ad12884e8aac272df262664d4885","sha1":"a56976cabab785adb41b5f7ff828616e4c9c36fc","sha256":"c0f986b34ad1a6fe73172a027f8a6f1c424c046533dc2df092feb918114daf66","sha512":"5c93d532922c7a59481aaec7490cd049416cb0c3a400a1461f20473a4f8003c21594ef516f4fe451143132f08b2f81a13d139051ebe2d8f36d375cc533d2d2c8","ssdeep":"","tlshash":"44b02228220accae888b2200c3a002a802080800f0c2ba0cc2bcaa0030cb2ea0022803","first_seen":"2026-03-05T10:59:01.599022Z","last_seen":"2026-03-05T10:59:01.599022Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_c.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_c/icon_c.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-17bb\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 4538\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6917029407327942309\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6075,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"6fd781178801655c7e8399929258b351","sha1":"b090ea1a0de1d27f3fac776621f715493e87ddac","sha256":"41cc3ebfdabc18e26e77b18bc4dae9de5b50666d1c62162744c499945e2fb70f","sha512":"008b2ca3a5d6347fc77bddf12bb265f40faa796d455e89ef121174953aa4bf3eff53e9b19c28355054d8d591049d4e63b83794580e4536536e1022ab80c983ea","ssdeep":"96:hIMSUAeLFVNpygrRgz3Mm/dPbvqq6MiU98tbN5RF2x+PrYK8WaUB6irfgpjNLDv:hISLvyyRacm/dPzqWOtfRFl0K71WN3","tlshash":"9cc19f9ab83ba48b8478867ab6b1811f35762a5bfde336eccd141513af1515040c91fc","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.659586Z","times_seen":20,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":247,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/Button.c473e3a2.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"3.167.2.53","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:27.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/Button.c473e3a2.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2o9o7qal.3j1ai0ll.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Thu, 05 Mar 2026 04:54:20 GMT\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\netag: W/\"694264e2-2883\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: LgLyPX8WtrdHXZ31EGCjWfwTDUeAz_PuONPrOrGoLXfbllg1W1ZSzQ==\r\nage: 21847\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":10371,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10256)","md5":"b0152d00c2f305df463d02d2b26bb0d6","sha1":"ec985c18f069617a87b4c1f1c20e1a96b6972049","sha256":"ff2743d0c5f71a004611574b1ff6fef857173311483414ee569f9b6fc312a28c","sha512":"51ddb771b6b8046a3a7119f99ea7fa3f97fc7fe43c29314daabcc4f6e85e536232557d5087e3276eeee122de200d61cd3e9d266c77d4a1076e6a6d4dbd995fbc","ssdeep":"192:VUCi/WvmQ/y9OmrgX8In8A1gLGWNKi9N0FjcAVD2Mk0srw3:Vc/W1/y9OmkMK8fKWNwAAkL1w3","tlshash":"4722c8ccf0a521274393a354e13f284472766c1c4895a118b65a9ce17ffa17fa22ff7a","first_seen":"2025-12-19T03:52:37.948953Z","last_seen":"2026-03-19T23:48:50.679836Z","times_seen":389,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/jquery/jquery.super-marquee.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery.super-marquee.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-1151\"\r\nDate: Fri, 06 Feb 2026 14:10:03 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 14:10:03 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9808\r\nContent-Length: 1421\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8005320763341788188\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4433,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4433), with no line terminators","md5":"f77d83590bc0a69298f2fbcc5d9911cd","sha1":"1d6aa25d7052f53ad0181385e5efe72f224bbdb9","sha256":"1d042b9441e860ddcc01b9e9e5e8d354121ee0e31b47f6e18a321e2e633d22e7","sha512":"a39dc6c01df32c8f72842af346f4d67e1278d37a74a0541537b8274b421bcfbc547a2f4844f3c4b6c5cdda4c78f0a8f41171c87ffd149ab52526a95bc6c5bf61","ssdeep":"96:nwzrUsI9/8w/ISEgOGXFRNcrc8PQjc3Pb:+rUsk88OnJQA3D","tlshash":"2991252d7290f5d559cf3c3be02b0b050c785123a54e00927a65def279ba379a607e1f","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.53701Z","times_seen":17506,"resource_available":true,"data":null}},"time_used":2788,"timings":{"blocked":2520,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"manbetxss.com:8989/mobile-api/v5/origin/loginSwitchCheck.html","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /mobile-api/v5/origin/loginSwitchCheck.html HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=44d17259ab44b1b54887077d522d7137\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\nout-line: gb-cdn-801\r\nset-cookie: route=251410696cadec6a5b6c74aa4706df12; Path=/\r\nsub-sys: mobile\r\nuuid: 00752-01-00000000-1772708301b64f\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"1452cebf3e2bb129b06762f43f09e5c8","sha1":"0ec65f1e79233e8c59f76c55fb89ac8637cfb070","sha256":"99a31cd18b8ce37d3725d0a77d5e314452d2906ed2b54b8b19d4de849d1bf13d","sha512":"758e5238156c2ffef164019c0090d96ae3567b56cdb9180b179f9f20dbefa3d184a9b0776e96d10667ecc0bef04ebccad0959b1eecbf5526077c096e22cfe919","ssdeep":"","tlshash":"b6c08c49f00458abce02239456d828402fec189270c9eccddc0c4a58f2cb4dfe322c2b","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.558795Z","times_seen":15814,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"manbetxss.com:8989/fserver/files/sportTeam/football/en03.png","fqdn":"manbetxss.com","domain":"manbetxss.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manbetxss.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 15:45:54 GMT","end":"Sat, 16 May 2026 15:45:53 GMT"},"fingerprint":{"sha1":"24:FD:DF:E6:9B:7E:3D:0B:EF:04:9A:38:42:F9:8C:0F:E2:8F:E5:A0","sha256":"8D:80:1B:83:79:91:AA:74:CC:DC:2B:94:F0:C2:B0:66:A4:BA:1F:DE:85:31:E4:4C:D8:F5:5A:C7:74:EB:9D:26"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/en03.png HTTP/1.1\r\nHost: manbetxss.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nCookie: sticket=REl1TVRVME9qSmpNR; route=2b8dcfae973a524ce800a350c729cfda\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Thu, 05 Mar 2026 10:58:21 GMT\r\netag: \"5bebb58e-11ef\"\r\nexpires: Sun, 08 Mar 2026 10:58:21 GMT\r\nlast-modified: Wed, 14 Nov 2018 05:41:34 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 4591\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"2770375b430afe8e7ef12676920eba4f","sha1":"4b4115b62f72e5927752366b7a130d82f8e1ae4e","sha256":"f15bc543825a1aac543f62aa8e5cf619daa7e76cefe7172ab6b05b72f9160bb6","sha512":"69abaa3bccf3233da7c25152a80c90f166ede59b2ecebfe2a0b7afc3677405abef1dec62e3024e571d51a8a913314ab1ba6a3bd015e00aae83bb5f9abfac94c3","ssdeep":"96:oO+fU/v0RiqyBWcGbR8Ir0htgg2HFLC4ek/P5W2i/uxsFUJ:RX0Rir3Gl63gg2HxCkP5W7/uxcO","tlshash":"85915c62a4862068f4126740bbaba4cd17676daa011c49deacc4392c7e353968efc0ca","first_seen":"2023-07-09T00:53:37Z","last_seen":"2026-03-05T11:01:01.127038Z","times_seen":579,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/websocket/CometMarathon.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/CometMarathon.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 21 Apr 2022 04:30:12 GMT\r\nEtag: \"6260ddd4-2f13\"\r\nDate: Tue, 03 Feb 2026 13:21:58 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding, Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 13:21:58 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2398\r\nContent-Length: 12051\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9667479249974059699\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12051,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"466a7ed7d00986d45375c0cbffb5233c","sha1":"68845ead668e9abd29c24b491dbf97b219226c08","sha256":"7ddafae5a0a552d2d56101cdc8306403e8fb9570759d66c48b25893b409f0123","sha512":"752801557c12ee7830f1f2e55352ab9c033aff01ff79abdffaee1601c54cdfc85a2041facfc5a7e180706812be5ad08668eada116544197fd2a784bac1903ea0","ssdeep":"192:0Pf+0Sn4NyRSTTPhvygOdWuTdC3d7QPXLHOm8cSCl1Ej3m7YAPzhsoqFncJ0j:0Pf+fnwfcXSaGLj","tlshash":"9e32314b6cf75085592b32b50f9f24447239d8572605e81c7dccaae48f98b6c0b6bfb8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.567524Z","times_seen":17451,"resource_available":true,"data":null}},"time_used":2404,"timings":{"blocked":2143,"dns":0,"connect":0,"send":0,"wait":260,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/index/icon_b_hover.jpg.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:26.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/index/icon_b_hover.jpg.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-201b0\"\r\nDate: Tue, 03 Feb 2026 09:58:38 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:38 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9278\r\nContent-Length: 88057\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14841500288811842983\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131504,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"736103e9791801baa428881a926677fb","sha1":"b5b7b0d60ef4b96f55b295ebaa4d9240c565915a","sha256":"137424fecab87fbfba66965643ec3c253fd3599e3c2cc4092dafc369c66e68ad","sha512":"e4da2ab360b883f0bf1658c05085b330d5c6b0520ec7e52003cf78911ef61df9f0cd968d4ae1057c0897bd314cf2010402a9d9dc845ad3313ad68eec7c36901d","ssdeep":"3072:272/qNb4llyBfEsJiONU+b1SeXahwaXkf84ofoNVqX:dPlyJ2g1S9hwEE8N","tlshash":"cad301b37c095e584f2c8102a6de25c64f1def4b4286cc12b51cb8ea53d169683ceb7e","first_seen":"2023-06-07T12:23:37Z","last_seen":"2026-05-01T19:32:21.565976Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1682,"timings":{"blocked":958,"dns":0,"connect":0,"send":0,"wait":721,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/js/idangerous.swiper.min.js","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:15.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/idangerous.swiper.min.js HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 11 Aug 2023 04:30:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64d5b951-b083\"\r\nDate: Sun, 08 Feb 2026 05:01:54 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding, Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 11 Feb 2026 05:01:54 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 519\r\nContent-Length: 11957\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9240650914630541724\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45187,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32034)","md5":"f15409fb02c527ce1f66a2fd3c4aa0e9","sha1":"1e1e1bcc0f49e99e14ba34991cffe0745178d302","sha256":"1a1b5d3d6fbfc28abe37a668abd59494208c63c5f0b5d040cf4bbbd137f87c27","sha512":"66a384d6ad5fba862e778e24c43326a718328b6f860469fb5eb69c2687b0bbdc3c2dfa9049b0e3d5509214db1dbec4477f5c3654dc04446a505379a4300d4908","ssdeep":"768:oTFZ8CkWyYzh9MTvl7prcAgQW5ppZ+rPPWRqKDyBuq0t:cZiY9uTJuAgQW5LZ+rPPWRLt","tlshash":"5613f8c1b32031a741f3626e91fecb4271f54966aa05d4dcb5ed84c41ab489a03beff9","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-06-07T07:30:11.533498Z","times_seen":17303,"resource_available":true,"data":null}},"time_used":2255,"timings":{"blocked":1968,"dns":0,"connect":0,"send":0,"wait":286,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/commonPage/images/partner/partner-hongtu-gold.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:21.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-gold.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1ab45\"\r\nDate: Tue, 03 Feb 2026 09:42:22 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:22 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 9995\r\nContent-Length: 83011\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12282491970775368823\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109381,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1f1a5a7aa13ee13ebd33338b3b1b0680","sha1":"92a135287652a3582477b8fbe0420847ad4a8c6a","sha256":"1d794bb495091aa98a44b50f428eae59185a9b9c55feec3045ebcb5ec1de796f","sha512":"1d4021f01cda849ef9c12b7f9edccd441892aa8e3bd1a5bc165e88c561c24291191aeb1a3a205214505c1399012d07581bfabf4803d9509da45db81f0e101a61","ssdeep":"3072:vutRp5cNyBLZQC/brFWegWNnv7LztzwcpG1cTeJrB6:mBiNyBJ9We1R7LhD6cm6","tlshash":"eeb312117f655c20f47443b424ebfa34a4ac4cf7d854a8a287a4b1dedf88fa0955193b","first_seen":"2025-09-18T16:22:49.442313Z","last_seen":"2026-04-17T04:44:35.22244Z","times_seen":1728,"resource_available":false,"data":null}},"time_used":1310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1036,"receive":274,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gv8yqx.pham.xin/ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_b.png.base64","fqdn":"gv8yqx.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://manbetxss.com:8989/","date":"2026-03-05T10:58:19.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/manbet752_02/themes/images/footer_icon/footer_icon_b/icon_b.png.base64 HTTP/1.1\r\nHost: gv8yqx.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://manbetxss.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://manbetxss.com:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 07 Jan 2023 07:30:15 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"63b91f87-1851\"\r\nDate: Tue, 03 Feb 2026 09:58:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:58:37 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 4654\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5624072584581128653\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5e063b8887c2a7c302b9d1032191cab5","sha1":"596658a849bb1fe5d59ede1feef18db95a9719ad","sha256":"5649e6912a883ed01252d86c8cc7dea5ce1f70b376582bd71a18ef957fbb109b","sha512":"55f9f95b4c4ee0c11ebd7467111a8006fc3b3fe8ab1c1e986e613a092e595e153bf63fedb8e40cc77af82f8760b8553103ce10d412865265a7307099fec1d1e8","ssdeep":"96:MwIMSUAeLFVNp57J8UoavFBuUYlPSM2wTaCXHCN3waCs7zC8HhthuiyFhFXKi:jISLv5aauUjyXi1wafK8nkiQn6i","tlshash":"2fd19e373d526d075461c3ef42fa8cd72c83fc2b17eb725954592ace421e6602549ec9","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-01T19:32:21.649685Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":951,"dns":0,"connect":0,"send":0,"wait":322,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}