{"report_id":"ac373cfc-1469-4ba3-9b0b-0f811cdea29c","version":6,"status":"done","tags":[],"date":"2025-11-19T06:49:08Z","url":{"schema":"http","addr":"cdn.yxrcr.com/wheel-plane/1859/ja.html","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cdn.yxrcr.com/wheel-plane/1859/ja.html","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"title":"What's Next in Your Career? Share Your Plans","dom":{"size":123580,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"7eda4fee1e2cf74a3322a83fb9491cf2","sha1":"213e1081e5fe5c74abca25d1e07f0df545b124f6","sha256":"6b935d6e99e8d101f378c7d47a7c6cde992a502dc030295a9de63f55ce498bdd","sha512":"d11248774d6c415022731095fe1fb73c6cf6ed48c85d5019742bbcb405ce352d01696c28a2857d2fe379e0c7cfe6d78ad593215ee867ff54f4d5ce58d93d651d","ssdeep":"3072:XfGfafbvMq79Hz5ea7IgIhBTs1q9PTi9eP+ssn29NZ:v/fguH9ea7IgIhBTs1qti9eP+ssn2jZ","tlshash":"2cc30a4b96b306292d2e77a0d092fb04e15bf74bf7e67bc4687900215bc29dd3a73690","dom_hash":"domhash8426e20cbbf1d82bb6f52d58c1d37eda","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cdn.yxrcr.com/wheel-plane/1859/ja.html","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-24T06:49:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"cdntechone.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fmscc.com","ip":{"addr":"104.18.37.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-03","domain_rank":56637,"first_seen":"2025-05-23T16:04:51.866057Z","last_seen":"2025-11-18T09:00:31.441116Z","alert_count":0,"request_count":2,"received_data":2467,"sent_data":935,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-11-17T01:58:33.671842Z","alert_count":0,"request_count":1,"received_data":834,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.yxrcr.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2022-04-19","domain_rank":0,"first_seen":"2025-08-13T23:36:23.150529Z","last_seen":"2025-11-07T21:14:55.739905Z","alert_count":0,"request_count":59,"received_data":638212,"sent_data":24895,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Astro:5.12.3","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]}]},{"fqdn":"cdntechone.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-24","domain_rank":31929,"first_seen":"2021-12-24T17:09:58Z","last_seen":"2025-11-18T07:16:31.051589Z","alert_count":1,"request_count":1,"received_data":17276,"sent_data":378,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"datatechonert.com","ip":{"addr":"139.45.195.253","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-12-24","domain_rank":17968,"first_seen":"2021-12-24T16:44:17Z","last_seen":"2025-11-19T03:23:40.635023Z","alert_count":0,"request_count":1,"received_data":482,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f1cac53-B4mNhJfU.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d87c0c29d720f3cd10903b7f9d25fe3a","sha1":"0441197c0db8b4ed549537983585c57be6609a62","sha256":"59099420ce18e58309b0338fa10bbb93247b2584a75e72a320a9dbd970a217e7","sha512":"0b732de4f15e38a8717a596bb590f6e78b1938d64e3cfd684698fba119c7b60445a600e0bd5447fdb28ad29e1531217d8527f065c9e802d0dab187548a36d2e0","ssdeep":"","tlshash":"8661146967fa3f6f4c9a2b7a524dc10e0a3d1c0ba489c6346d97cb2cfd5058c38b1b51","size":3236,"data":"","first_seen":"2025-11-18T22:40:06.223265Z","last_seen":"2025-11-19T08:34:50.812933Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b43cf2c-QMDgqyVC.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f0fff538dc68452012edfe7a8836ef2","sha1":"110f834151c99003d26fcafbf81b47d30594a001","sha256":"c3d51364e63189becac42410be9934eff2b46e132e9c079f3de85cfacce05a02","sha512":"2d6b14da8922451ec5e9513880059a4bdb116ae9cc95dd94b8d37e03b28d2e31c8a2c931497a806f4ef3c7675d782027804c734f4e6695df4efd936a376029aa","ssdeep":"","tlshash":"5751c5bf84c8a8b90a4db1add636d1622e1828523d1dc4e1a4bd4d1d23d6093e17df2b","size":2746,"data":"","first_seen":"2025-11-18T22:40:06.247055Z","last_seen":"2025-11-19T08:34:50.801594Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/p525c8e-BMnBQsRY.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d3275b6dc314b3bb21c3eec17d4fc60c","sha1":"5bfc31edae1eb7f1cdb5e4fd37da824dd62362e1","sha256":"1e0749cea1416981b5dbd4cbaa896be012fe4860c0b5866030e937f98ee28308","sha512":"458e9e5d1dd65bda880f3b8a819dc4a9957a9b8fb630c0baf6b4b87683b9ddb761d6de512a7f49bcf6908d3e1e1ceb48df971bfb06b0943e2092f4c96c404da7","ssdeep":"","tlshash":"a82111c2b2b2a07c17b516ace0327341f545896567cdc6d0a26a02752ee4dabec3162b","size":1354,"data":"","first_seen":"2025-11-18T22:40:06.2602Z","last_seen":"2025-11-19T08:34:50.794784Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/h8d9f44-D7IBIoto.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ca1dc5fb239a1d433f9d9d67d1369181","sha1":"8c7201e29425a82ce7a3302c765306f59ca27bf5","sha256":"5fc8b4482936f3f45be697a6e8dc8049e31cc1939ea3f9d84b6d70fc53a0d7d0","sha512":"ea9f04209b3d0f7beed2fa35b9280decd4509cc9c69b490e70c6ecb071ac57d7af332b52b2c30d97c0276b56edb54c6d9d914a68d002cba4d04f087f29b01958","ssdeep":"","tlshash":"da31748ce8509bac943e29bdd25d12257f05276b13aacf0192b9753b12a82c9a701f13","size":1653,"data":"","first_seen":"2025-11-18T22:40:06.252032Z","last_seen":"2025-11-19T08:34:50.797952Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/ae06ca88-BaGT9Px6.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7a1d75349934126a206e598cee3df92a","sha1":"b62c3de8206b02f582a6b14744b37475f194d127","sha256":"9a6be423a93a2f375fe412dfeebb84a849990eccfd0856f0a2281fdef9dc3672","sha512":"1d1a157e2f226bb6dcfa50b140d93c58dbc539c6b409d919e0a684ea5b219edaba44ad79d84da57e823b0016ad8d91d752bebd287b7ab14cb71560a37c4c1288","ssdeep":"96:z7/jquYz6zuxzvPdBb9QQNaAwNSNg8F/A8qi44:P+uYGSzv1B1g+iyA9V4","tlshash":"e891218fb87920fc7a97c6dda173d1a3163721162989c1b4a5d74f2807a0289a37fb47","size":4306,"data":"","first_seen":"2025-11-18T22:40:06.226952Z","last_seen":"2025-11-19T08:34:50.819232Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/d6d528200-CJZA7sNx.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe1971884f1a33c0263260127ed18193","sha1":"fb914355118a54e4367d66e671cedd979992a396","sha256":"d65dcd0fc78da5bc4930559c58284e1aad602dea5ba837073998e99fa783aaa3","sha512":"7d59ff739aa5b55fb0de4bc982aefc3d3096725718c526ff9af857aedca5a2a75ede07cd5bfafe79b8ce11b48d8ff1d2606d76f2c169bb413d7e04a17a6754d8","ssdeep":"192:wxpx4drpKFQZMYHcYSN9URwU6fkQQYiESpJxr3ceQzez8L:wxpx4drpKFItSXUv6fkQQYqxr1Qzez8L","tlshash":"7502294aa1700bbdb4074cece9e1d01643349b55d64fee68f69d4e2836e810823df7a6","size":8714,"data":"","first_seen":"2025-11-19T06:49:13.107899Z","last_seen":"2025-11-19T06:49:13.107899Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/wheel-plane/1859/ja.html","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fbb7dbae3c20bc81da1b8bf41c13e8e","sha1":"f333d36b1dbecd026483e78eac843bdeb2dde04c","sha256":"eeeffffc79c48f4fbe510fc3fcdae29885a18a48ae121968e03fe502fb48fecc","sha512":"1e82716fa5da363b595ffc7b569caaa347df281bc89fb9d62dd89d2dec789280d9574694f6f78d250922e8d0d3bdc8a637f5748d7c4f4e5cb4e5465106542e0c","ssdeep":"","tlshash":"9ff0998af3c8b623410666e5321b801be67e1851b407a864a0a088e2ac7a449c189f3a","size":636,"data":"","first_seen":"2025-03-04T04:04:04.143618Z","last_seen":"2026-04-03T10:34:56.738183Z","times_seen":3281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f0bc9b4-CiLIOdbk.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0afa668c21787798d4ebd5603597218e","sha1":"1c3d472c621fc301b01199e83594808068f5e6c4","sha256":"1162cd04ab652194b4e5307fdfaee7f06969377b1ecf77dd46cf9723a4889605","sha512":"fefc06141db23f6277223e8f3518c92a9f525de866ebbbf17ad071583104a75e3026715b7d52551a970e5f8078a32f61a2e378119f40b6e7048b3425feeabe77","ssdeep":"","tlshash":"ba11ef8f80d47574441651ffe29ad31231120957678e8b85d2be4e782b24897d151a8b","size":1025,"data":"","first_seen":"2025-11-18T23:20:06.484668Z","last_seen":"2025-11-19T06:49:13.175727Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b0cf3b5-CjXbJDAW.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c6978c1f44dd65e719369e81274068f","sha1":"011f2c8f1e7c303bad2462d01dc093d7ddd8b2f1","sha256":"40166a11b4dd55e8f620974ba80c7c502c0f62918bf42ac8bcd1d7427ef9e1ec","sha512":"b27ee1a3fe3950de84cc0c9e0e66330b71dfc8623053974eae747f6769df6d1555f88a5eb3fbd6e29cc9637820eaf29a83245bba1b7f9f832d95bf5e02fb7af5","ssdeep":"","tlshash":"6b11848f09e05698c05b15eed616402136cd007b2bccebc1a2fc8b300b603979160f83","size":926,"data":"","first_seen":"2025-11-18T22:40:06.24913Z","last_seen":"2025-11-19T08:34:50.806192Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a3a30e-DTCxJq5X.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a7626e6a35aee1e080671f766cb2a07d","sha1":"4cffbec6d81e9e584f7981f327c2507eb32fd0ba","sha256":"10a26cca023b7468028f835c033eacff57148d8273b785eedfc9ac8792b1ce99","sha512":"bba729b1bcb7b7295db272ce267a43fa8a44384c12d4935f16755e6f39e141da6845dc28687f08edd508b1f666159a2a6cca7291fea97d55c520c586444cccd3","ssdeep":"","tlshash":"2d51e18fd02620594e95cfbcb87525173ae7c22a3dc68d4863d4d83c41e4bd622bf7a5","size":3040,"data":"","first_seen":"2025-11-18T22:40:06.262472Z","last_seen":"2025-11-19T08:34:50.814044Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/n7198d9ba-OcqpJVkJ.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"078f3f3c99f2e60ca365a6a8e23d75bb","sha1":"edf0f28b1ec61d185affe2e5f27f0a9d6438bb0a","sha256":"23fe08000063052d1b9de0fb7fcf65b9536b96a9f43bfa365be546307c1f7899","sha512":"7d95dce01b63a65da2dadf1357849023501bf737a493dac656a3f38aa5f83fb214c36ca270d4c33efd5ac301f4f6ac2887e899634cade5037fd74196c9b1d915","ssdeep":"1536:Hr2RivKGOUC9dpjXOnlVS+NLcgzAyOx+XuPqTeJcvmzhNQ8:HiRMnlM+NLcgzAye+XuPqKJcYa8","tlshash":"f463f88b3391a1145ba9409514ba0403e399fe9e705994e4f6ee54cefb8ccc5f27bb38","size":73304,"data":"","first_seen":"2025-11-18T22:40:06.258278Z","last_seen":"2025-11-19T08:34:50.812317Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/l1f7ae85b-BnTovQDf.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6fd30a54ff04420f0b7f2b29e0f0c964","sha1":"4fbea2293b9b7fe892846e47027ab805075335ca","sha256":"ef43ea679c3a412f38d365389f12df49bfcf376f4b45343f0d0bfb43cc85a300","sha512":"7158570354a3d8b77289fa1034bf1d9e8a05cbf5fc26b482e13b315de65a39fb5b6c489ddec8e9e018c0b40b65ffd8a74e3ec38925856879a6c8853e4b4ec8eb","ssdeep":"768:WW5FCDDOqykJ7xlWC3p0NJ8Ej6SKwjAEtMDjG1pvhQ5WGyL22gz6lDNwnfZRFxeY:W4eqs7tARj6CjAEtMDS1prZC","tlshash":"73534a687056203a03ef91e6e0bf6a4bf2356812e48dc644e356cef06fb465d4267f2d","size":63529,"data":"","first_seen":"2025-11-18T22:40:06.265212Z","last_seen":"2025-11-19T08:34:50.798483Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/o51660d52-DzHc7Lo3.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7c4a05dd97dd3528deb5df39496ada7","sha1":"910f59e15b0cc78d581797a550cb7e87e9c86dda","sha256":"4238adbe1c448d325a04fab465b92cc17fc01ce698ce27165033a232a1a15fa3","sha512":"124e01f18fe03e6a6c218ac3b7b333d8dda30577274d3f061204cd92809afbbdfbd331b1c31bb4ed491f7252698a6d970b805bc196013fd303546ebf3ab07ec5","ssdeep":"","tlshash":"70513599b0b37b7c743f2acce46d5c46f30a2b59d7494e90a16da8312b840c57f5a38d","size":3116,"data":"","first_seen":"2025-11-19T06:49:13.180374Z","last_seen":"2025-11-19T06:49:13.180374Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/e89d6de-CstSi-vg.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8c75f4f8b1ef8f394ae7a51303fe09bf","sha1":"1861fa3f69d1b42eeb2ea1c17e608245fa3991d6","sha256":"ecea0d7bbbfbe67d05ee4f62d33dce6c971e3b8a0a35be51f5d3b998063b7947","sha512":"57fa49976d7200651323628b0a21a2f8a4f9db3f630a860b054669846de6f2d206cbb1d1d983172efe2198c0192bb6a0f9bcd202837bc0788bb84b2186344452","ssdeep":"","tlshash":"6001108467f05b5cc02826dee51da00572890469bb8cdbe1e1bc9a2983895d6a5a0b23","size":720,"data":"","first_seen":"2025-11-19T06:49:13.16349Z","last_seen":"2025-11-19T08:32:11.455122Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/wheel-plane/1859/ja.html","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"334c79710806326becb51a9a117265af","sha1":"e0762792ae4456ffa67672bc95fbd8fb9754d256","sha256":"ccd4fc484ae4ba4d2d5327d95b1f41b563baa7bb9e412595058b79c6dd8a47a0","sha512":"c91abf7aa917a6309ab2dc604f57e61be47c3745e28d7fbd6507130d98d5ec60880371b31edc099a01602a9249e0d339572afa0901b47c8fcec10cc5730446da","ssdeep":"","tlshash":"e02196ab231d3348b820e438497cfa10810f58a468ed500e9ec24e456511f1fb9fcab9","size":1149,"data":"","first_seen":"2025-11-18T09:00:34.675246Z","last_seen":"2025-11-23T19:55:11.193534Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/h198e69-CrLPkp20.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869fa6554ea4197359f05c6ecd8fa45","sha1":"7547d08782805f63ca91036e1e2e915fa8cf3395","sha256":"7e47662534b472d9db3017d4c32343702943c1b4c21ad6a7097de7898f7bb27a","sha512":"41cd9733177ebc47605f758eb9e8d7df090b4254109d0236f32e4746752ef4e90f9720a30d666051045648cbd1b845b8995df8c3286d60afc29a2924265682d3","ssdeep":"","tlshash":"4471c5cec8d58934418e21ee1028126076ba8e5b753d87c890bd4f794faca0ed485f5b","size":3733,"data":"","first_seen":"2025-11-18T22:40:06.218065Z","last_seen":"2025-11-19T08:34:50.797315Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/t2836d36b-CElx2Gth.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"263ab6098f0cd4f1a685fec4ce61b31e","sha1":"2714c02886bac211c4f15930351975c57db217a4","sha256":"491834d067df3e9fed66afbdb4470e7ad2a25c251efc9520cdcd0fdf077adee5","sha512":"8d28e13068cb92890c4cbd58f1855729f8b72b478ecbece25f8ad168ba2816cd5f040c6dbcbaa550bc1757b9c716304c9dedcd75f0ae881ac7d89be6244ad262","ssdeep":"192:BxpWdi+rFNuz3k83gZYjuUHubYD5XJkdlFEq4Db0jPQhbqE3BegG/6:BxpWdi+rFNuz083CUHubYD5XJMERX0ro","tlshash":"6d022a88a0d61d3cd1da8cfda4608069b23f0a59e95fd5d1c3ee9ca80194d4452fbf8f","size":8625,"data":"","first_seen":"2025-11-18T22:40:06.256041Z","last_seen":"2025-11-19T08:34:50.794241Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/i7474a7cc-BgU3jhM5.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"28995a930907fcc9785ecd35901be5a1","sha1":"d04d05cd8f61b7bf01b75c5de48071d57f4e7605","sha256":"98f403fccc6c4453495aaf783cd70cbd82af2e8f140af00a2962700d40931da4","sha512":"172ed14a6c8281ac396ec8419b2ffc4cc057449e145a27eeb3c16f1f905daab9f66aecbe18bc9cca64981ab7d42024ee3277d7f96b294e712f85bfb18400a1f4","ssdeep":"","tlshash":"e731558d98b0a2f881ae09ecd11cdc2123180227a24da690d02e8f39172de8fa117f83","size":1510,"data":"","first_seen":"2025-11-18T22:40:06.230553Z","last_seen":"2025-11-19T08:32:11.469544Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/t21f5d50d-BW7-kLfr.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8b477b4574274c91fc8d7f1a3f0b2754","sha1":"0f9158f14db03b8cf362fd2bc65ae88177e28001","sha256":"f82f61960abf1eb288ac70c23514b6d6962ac0397a5f65af4e8d26af58147655","sha512":"87465c3d27866935a18fe28779d2a8abb3cec245ab609ce8780f17f23768fbf692ef087836ed3f663dafeaf8ce8ecffae3c754e06b4660b4a8dfa8396fdc5e4d","ssdeep":"","tlshash":"1d21fe8eec7096bc842e4dbce156e431571923afa658c370d48e9e791350787b83bb03","size":1349,"data":"","first_seen":"2025-11-18T23:20:06.514193Z","last_seen":"2025-11-19T08:32:11.474983Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/u232fd01a-DERIcQgS.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f9231ffb61449fbfbd5eb9543c28dd0e","sha1":"6cdaf3d78d81a768a9a6b2e0916c429553c3062a","sha256":"033b4bcf8f67882506bb382c91ea88583bd88d13778a45f61cb48e78a190c66b","sha512":"9996bb31e1db697b49ba7cfb68c5cf15d8aef0245b566dc68b929770a2ec5b720b03b6a7a89420b051bbff2db958b5ee7ff7c76acda633b36a9de8d0dc0626f4","ssdeep":"","tlshash":"cb21a788a1a007bd460701ade21d6005384702338f8e9f91d2fc563d07a64efd91af85","size":1176,"data":"","first_seen":"2025-11-18T22:40:06.24312Z","last_seen":"2025-11-19T06:49:13.113802Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f8103a250-CCNtYbmx.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"65ed510cddbd86df9d0d5eb87a43d21a","sha1":"57c45c23844c715133a33344c3361be877dd1706","sha256":"619f4ef870c2b826a14d5b9debe822c17f10c238de361e1be52f4f11d7dfb0cf","sha512":"0d9283c432e84461c18596c15e3e88accea20e31308d46d8a9ceb082537622c258a10219f2f859a396eccb7f094084e74a6d31d3ade2a9b54183240938bc933b","ssdeep":"","tlshash":"603187ccc191667ce47f07a8c06d605eb7054773eb5f8f94e2be94351256c54620bf51","size":1824,"data":"","first_seen":"2025-11-18T23:20:06.511515Z","last_seen":"2025-11-19T06:49:13.164924Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/s68b30caa-Bz2GfXOz.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d016aedfce775d9d19c7015048a129e","sha1":"93e9c91f6a9c671cc9ba5acbd622b0d68416c052","sha256":"e03774b807fe666ba742d11b23092423a65a47d6743bde80489f7e5facf3d289","sha512":"e1273788a9afb6efd0d2028d0a7e741818d09b806851cb62fe0649c0e2440e5aa4c0093f91a53da54936340d123f3004309d4d8c3427b4490c8d098ab5fc786b","ssdeep":"","tlshash":"6ef055496bf40e05812a22adcb46d11071ea0073a2cc0f61e23c073a43aabcd99842c3","size":452,"data":"","first_seen":"2025-11-19T06:49:13.140981Z","last_seen":"2025-11-19T06:49:13.140981Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/c945ea49-z-DJgWiD.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"17d01840233fecfc8c28d421b528bc36","sha1":"1a7cc00b2a16466919eaa042f57931e8b94552b7","sha256":"873f31a1739fc05156442b1300bb1d649aeb2474f5796ef3fd9be002f388c7c4","sha512":"29717ca54aa3b1c3c149cafdd3f1777c676be255b09b4495654017bd8206836c974897204e85d2198c9993d44f572d785da5513eb42424fd979a7c44ad413c48","ssdeep":"","tlshash":"ff019ccfd9e0f658854b22ecc1652013629512b75f8d6f91b1bd4a3d0ba2197940eb07","size":722,"data":"","first_seen":"2025-11-18T22:40:06.240286Z","last_seen":"2025-11-19T08:34:50.802764Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/m0d7f03-uKiSnrbr.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ddb08ad6fcb495956ecb5a55ba472d9a","sha1":"c5ddb6e22c1d5c337d4a6fd5acfaed754027b2b3","sha256":"8b7814b13adc6d7caf9d50533aa86899827e596a04ac827d2f276294a05306dc","sha512":"7688e93e884751699f683cece75af94dafe4a219c19ceae2fb3d90f38f2e63abf4668bfbe2000b3735f28c567801580d06f0d27c73289abcd8e758b0a3cc9dfd","ssdeep":"","tlshash":"e3e0e5984ae09ad9419e26ded616540265c81863179c4f61a6b80a382775bceca08347","size":421,"data":"","first_seen":"2025-06-24T19:07:51.329462Z","last_seen":"2025-12-16T11:57:19.837877Z","times_seen":1806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/y033f998-C7E3v2yU.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53e949c1fd2b54944b0d6a416fec71a","sha1":"2bf7e9251f6f6eba762e589c5da603524d60344f","sha256":"c19301f85d292b76db7c66515e0027d8112867f2f0ed5183963aa0e1e0c830b3","sha512":"844e363c702480312cf221b0eea60e24677b1939192fe3270c74a3daadd861e6a3f8367e10d1b4a5871b7d834f924134ee1b00894e82ec09e4c9fcc40b1c0a61","ssdeep":"","tlshash":"cd41978169f4a0608ae119fec06481317539ca13376dda47b2ad2d712fa6e1bf467b23","size":2072,"data":"","first_seen":"2025-11-18T23:20:06.467604Z","last_seen":"2025-11-19T06:49:13.170129Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/i52918b75-CVlrvyH0.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36d98b82e59a254b46b82e04402a04e3","sha1":"cf2e8e0cde3e97ae12df704bc6bfac5b707785b6","sha256":"ce43ff3b7a959a4b114243c39ad0f46b218fc91a84084c07b3e39a5785da1d3a","sha512":"10791daf0105c2e1996901cf67434c4699a41623b0af9de436b0e65e12019db6f8d471c42679ac50c1bd7dcb8eff3ee855b863441d02847296e336015227d271","ssdeep":"","tlshash":"a611b74f49a05454c00a55edc55a7270b07285bb13cd5f55f0ed1f340b6c29fce60703","size":957,"data":"","first_seen":"2025-11-18T23:20:06.504565Z","last_seen":"2025-11-19T06:49:13.187937Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/cfa52b30-CLqYhhw6.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"02b89f6693e28523c854796a17668ce1","sha1":"f433a53b9fc89c36f5716f24572b1027cd941d59","sha256":"3dcc6185260d76830f1c46fb646e2da99d120c936e593d95ebc0a55cb67cf262","sha512":"bf76975cdb1c809e215c75919325a2eeb69076b7944f7ab8418f37096415031cdc40611d9794a8ff8489a004daff7d21aa7d9eb8c6a85d37202949d59da92ede","ssdeep":"","tlshash":"18412003b171d2b59155789fcba2324ebbb097572ae4c5b8fc384d2053c858b8b2d329","size":2396,"data":"","first_seen":"2025-11-18T22:40:06.218963Z","last_seen":"2025-11-19T08:34:50.804106Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f11393e4-DidGunfV.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9428a201f63e1f12d712c80682b29cb5","sha1":"0db5998e268be9e883d2b58c15501e6e419fff3a","sha256":"2a0d816bcaf79edd78c1a4e8dc0e5c17dc8cfa40d0706595453056d7d1c44c15","sha512":"05640c387feeb196ef61c323bca64a0c17e904d23deffb4a40f27f53ae006963e1ee1a93e87e34087bd089a7cbe48bc9604126fc76f64f79535b4bb9e967be77","ssdeep":"","tlshash":"24f05c49a7f09e29d059129dd145b6017baa0233eacc4f51a2b84637539dbcf4d14243","size":453,"data":"","first_seen":"2025-11-19T06:49:13.145161Z","last_seen":"2025-11-19T06:49:13.145161Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b0d16a5d2-CvcI12Oz.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a39678bc580e77aef75889fb4a79d89","sha1":"316477261061fc1b601d42933854aaedb443f659","sha256":"a4f70c1296537997ad692a1b5b33f27adf0595b55c3fa7475c4ad50c73ee59bf","sha512":"58519ef4c82e15a073e48f40d48baf94cbcf8514b76d6471918c4103f8600c361f5ff9a85203eeb6e6a082edbabe97eb076dc9384334e4b1834da5b2e2834759","ssdeep":"","tlshash":"dcf027896af0e91dd07b23aed5569208399d206796cc5f11d2bc4727636aa8e5a40343","size":451,"data":"","first_seen":"2025-11-19T06:49:13.155937Z","last_seen":"2025-11-19T06:49:13.155937Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/d96092b5-muLwubwV.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"15f351fb46171e73c9570608b0b1f26a","sha1":"7acd2eedadfb14909e96cdfe65108ff8a72ba233","sha256":"5a7d11ad214321c088314d8e4e241ccf94478613fc884cd4ed1ee866898f8dcd","sha512":"1ec25e2be772964d56795bd4d455f4e39f93c96975e21143e49188627e0669e18f7752cd2a785600d390a8fa69d35b5092e20f7d5bab6aaf83f35fcf6f6ac3f4","ssdeep":"","tlshash":"7af05c98aaf17a24603d179dc6535a017289156387dd1f21d2bc063a836deceaa11383","size":451,"data":"","first_seen":"2025-11-19T06:49:13.157084Z","last_seen":"2025-11-19T06:49:13.157084Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/wheel-plane/1859/ja.html","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4c1af0f7b285642bb8af9be1358ccdf","sha1":"99684de7c628cfb3226e2859359829cd59044f4f","sha256":"1232c8f0c830c49e369ad8e76abf02d09bf431195fc82201480edc1515c217db","sha512":"b474f80e218865474416415cc857664a6f1e0934a4aa82ab217111f4baba262f92b0b9b69c5e5eeff8677b28bed39967e8752d16310a6b2d3bb60bd431603fcf","ssdeep":"192:8r3c1SyRoFCbsFOEzBr4WuVuYoe21WUfcdova4EUAMRjlehEeVGcnW/RGGb5ao8o:8XCbPm0WuVuYoe21Wucdova4+MRj8hDY","tlshash":"d922d6463ee7f2412e2467b1c07b9111b3f25952316ab192b91b7522786108fc3f3fba","size":10465,"data":"","first_seen":"2025-07-24T08:17:40.839961Z","last_seen":"2025-12-09T05:17:14.075084Z","times_seen":1721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/wheel-plane/1859/ja.html","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9b308d2b60038830ad23a38fe7378d2","sha1":"ffff1b947bf97ed50c37cf709358ddbef1327e24","sha256":"fa4cd9592f1e4e853c12a8de14d6f85f6892fa44e799f6351efad08fdf29ae82","sha512":"423f6918b76e8a6344cd7eb7896b65aa65ffefcecbdc6d3abaef00ea4569c18db324ace0bb3df64c0e6950b57852df7b8d775d8ad706b31165605a39135ecfe5","ssdeep":"384:8MLg4o4MvMD9S2YVKqFnQ7cjuGys4+GISTZ4Ex3ly0eqnatI8MfZGpsuVe6:8MLghh92YVPFnQ7cCGys4+GISTZ4ExVm","tlshash":"a082ecd69f5316443b2ce752e2678121f65c6c80f3d8b630782e5a41e8d0cea8b775bb","size":19205,"data":"","first_seen":"2025-11-07T18:38:32.601423Z","last_seen":"2025-12-08T13:03:51.548614Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/r17dd567-DIDTAZAh.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d4e3154bf4ad11b9d13a572d0cffbb36","sha1":"49e3689e08a214e7eeb64fe75a6b4d8468231294","sha256":"bb4dbc04ea2129872cf453bbc22e34378729faebcad86ab92374493bf00446b6","sha512":"c46a5b3b97fb792012249c8386046cf7e2e1e918af7e29cc003c79f5b476143330ea4622593abdfab704271db5e4aef5e70cd8fa7aaccc1372ece14d6be95c6c","ssdeep":"","tlshash":"daf0d4c509f11794411f269dc227244031d501b7875ccb00e17c472967598bfb900753","size":467,"data":"","first_seen":"2025-11-18T22:40:06.237968Z","last_seen":"2025-11-19T08:34:50.816713Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a7b6e2-CW4DfmOR.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"78594178eff45c4c05a509414e2cd020","sha1":"3ee1b2ae43941764ddaa49dbe06785fc963dac4e","sha256":"d5f16a40f7060b9ce0994a1feea628e1319b4da922dd0d9b4f752e695e8e7421","sha512":"3d0e98096888ebac253412eabd87c1c263f6b2959a00ce25195ff7f977f7c5a2df0d70daf4164de9c9a7c5b963b36905b727f6a2955c0494e235e8f3b9ea16da","ssdeep":"96:+7K9PuRatXbWQIlnwUjOq099YTGDQjgHQjski8Qj0zVzxJLIM9ysxmgUO+sszEQ6:IjOSPnGq099Yan/8dzVzfIM9vxmgUO+i","tlshash":"f2b1b4d4d499dafd0dff5ade2590d16273108f073c4bda24b2a14c1927f9c0661bab4b","size":5342,"data":"","first_seen":"2025-11-18T22:40:06.224046Z","last_seen":"2025-11-19T08:34:50.802122Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/cb1107-Bd0cs2sA.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c85c67800a6a92762bb95c9e1eeb6f0e","sha1":"7b204a80dde0d57a43c27fb57329354249e49fb4","sha256":"f9f88fb7aad4b438a4df2632d2554f3e1174b4d7bfb38b9425f27f209712a19d","sha512":"4f4ed4599337244a18d231dadeff0f272dd1da82236832f32a68779b5d1b29f17f7fc43defacf678cd444ca92be76e694e9b1e07ea74332845a431785cd7829b","ssdeep":"","tlshash":"93f05c8457f41969802a239dc66245443688157b969c5f21e2b80a3e53b6acde9002c7","size":452,"data":"","first_seen":"2025-11-19T06:49:13.186826Z","last_seen":"2025-11-19T06:49:13.186826Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/m1835b9-C738pLZ-.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f18c0aa70f8f0d94cd6ced07718902a8","sha1":"79c449b28e42052666191d84c634882d2d1372b7","sha256":"5e2359a24c296dc83654ddb05e072e3f7692ffcb725af1549c3cba2dfd242016","sha512":"76a02e22a4a9d5e7d1f4c33cb038f9c1ab808691615a2f27ec52e41dba789b6b29f81a50b2fdcf94514d0b7cc5d98a072b2f92ea7b0d00b8655a98ff55ebd628","ssdeep":"","tlshash":"c801fe8e54f83e94840a61afd526d22132d5007b668c8b9af2ac5b380766b9fa711b53","size":692,"data":"","first_seen":"2025-11-18T22:40:06.248009Z","last_seen":"2025-11-19T08:34:50.796466Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/e587d026-DSBcpPg7.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"79d10e1dfc53db4720e495a16493a06b","sha1":"df9bfb144bd3c6d7211fe900f6395028eca53d22","sha256":"8bf978d0cdf793dd88e74c92d17d35c78d3ed5a5c5dc48eeaf05dbf33e0bc97d","sha512":"63827cf276362125f5a6f252d2c816245f5b9aa43cf4b0003621c8f19743ff1a30703f4460ca23de5d3e09cfbceb8475830ba9c22fb6c282a8d159cf9c57f99c","ssdeep":"","tlshash":"ce313f8e2ae12931812914edf5377184b07f10a6724f85d0c02d8e763e9e9cbc7b668f","size":1753,"data":"","first_seen":"2025-11-18T22:40:06.22969Z","last_seen":"2025-11-19T08:34:50.818241Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f473ebc3a--X5F5Mqr.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a58dd683e6b4e68cc5b4f6d9540f1da0","sha1":"7efc5eec7ebc8b75252f9a1d6b7f4e70782ffc3b","sha256":"8dffc7f82dbeb72862998d281b05fb9b6e129624cffe231210134f3dc02555f1","sha512":"44ecd63e2aacadf23da6276e1c4fb629646e86bc078c2d8b738b05a51d89b2c8646c6bb509e2d13ea06f2d72f2011ca685b4f22e765cd712ee9eeb15b063f4b3","ssdeep":"","tlshash":"401116497b5c5858005905add014a411020557aa2bda4fe1e1bd557e2b6aede7813f07","size":1059,"data":"","first_seen":"2025-11-18T22:40:06.251059Z","last_seen":"2025-11-19T08:34:50.807316Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/q1734c3-B8Q11vCY.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3012c09291643865814261a7e35b46c1","sha1":"301427ff9b08b484bc385cec07df40094ece6583","sha256":"2515b3a44847c1a8ff9160a6f0fae66a76c2528cd4e8f7a544e8a72c75be3519","sha512":"605bcb9604e458f30c2829398bb2b4e16251cae58dbfccd3b5d184dc39a0639e583b13b39a4b0f319c6dd1b7ea21b1320cafb86ba6d23fff0dc2b8187c4399bf","ssdeep":"384:Er7nxH8X2KrGUE950vUToPmzN+VzvOTnK:c7xgjrT25lToPVjOTK","tlshash":"7292eaf0935c51d5d51e07bdea3d60e1a2392effabcd828072a8bda5546c2d12e08fd1","size":19684,"data":"","first_seen":"2025-11-19T06:49:13.135188Z","last_seen":"2025-11-19T06:49:13.135188Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/j9a97c2b7-EDT8vbzv.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8cde6ce7b828d7978b561334a939d3f","sha1":"6515525ca676604d3bbc6013cd5aad24f075441a","sha256":"5776f97a4ed71fcff3679b042c364269b6eebb50caae2831df08951b587d0e17","sha512":"4c4865881335a5e01985b5ef14079efe71da7fbd640cbfdd8e61991c5a4895f5c3abf2e800a010a8e28f099f89874f0d4b2a2e0d80b55c0fa302d63d42a4c0ce","ssdeep":"","tlshash":"5df05c91e7f04a5a402a126ecd87454531a85077538d4f12a2bc8b3653a9aca6d05743","size":449,"data":"","first_seen":"2025-11-19T06:49:13.128557Z","last_seen":"2025-11-19T06:49:13.128557Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/g15ebb895e-BUN8D5tx.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36d5f54a2e4eb61b1049e6e88e2090df","sha1":"87b79456904ab922451a8fde25ede04d36cc88d9","sha256":"76ddbd9d28d2dcdfde92ce4acf446c498cc89d24a74a1f800b922f28253b3b70","sha512":"c15912ee6fba3df03112ccedfccf6f683c5e697f38138069df8ac97c68fac51a961fbb7c27a5f0b282b0640b92686f184a98d52167780cd0a695d279d95838ac","ssdeep":"","tlshash":"98f05c815ff5ad14403512adcba6187436ad0173d6dc8f11e17ccb3a13a9dce6a00347","size":450,"data":"","first_seen":"2025-11-19T06:49:13.142904Z","last_seen":"2025-11-19T06:49:13.142904Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/wheel-plane/1859/ja.html","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"091fcea2ce8db1aa7fe44a4051e96b41","sha1":"4d1b368bcbddf456742d0abacd23ee510e609158","sha256":"433585662f852c8c76ded9e6f52054e1a120c78c7c0ecb8048fd3b99faa897f7","sha512":"765886ace161a524d53d770197f9f99de2c574df18129c8f32c3d4805f4680e2bd3c538527c6ed7e053b462fd1482e2eae75fcdf545bbeb795feff24d9c77d7f","ssdeep":"","tlshash":"14c02b9512f3e130f2a741c5c3cf32430000725602f841d351055c70401cc8a55a4f30","size":130,"data":"","first_seen":"2023-07-22T04:09:49Z","last_seen":"2026-04-03T19:02:22.732336Z","times_seen":8154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/m28e3f662-DvGsA-kr.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5e964b8ab60ea1d3a047ca1fa1f797e","sha1":"306ee2781824f7cbd4727a31cbc63ab043955aa7","sha256":"c8c2c47b7f1d9b7207caf9773ba5da788fc06cfbc3d17a76e3d4955f10d28ec9","sha512":"f2de94ccdf3fa60e68e2b87e66ff63b6c97dc4929e7435dc969bd37f8681982cfe82b11dae7cc3c6c55ac22fd13e75a97a1ed04c662e57dd9b83a70ec562ffba","ssdeep":"","tlshash":"13417399b1641b7cf00f455ff66c828fb016b78bcb0eca51f0fc891a2719995a786f81","size":2209,"data":"","first_seen":"2025-11-18T22:40:06.228822Z","last_seen":"2025-11-19T08:34:50.806829Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/y34b147-BJyWnKDw.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"aa44b8387a9d5ac63d3bdca046bb929a","sha1":"5f7b51e8548634d514157030fd0c300192dae82e","sha256":"8c10fc9d28b1e4277a08aadc9a37e6639d12e4216b04f90fc023074543a4fe87","sha512":"b7f1e5e90b5947aa2b4d18094cbd654b92193ef927394d8f75cb9c4a87e81d1e9b72740a7e8081416379a97d5fe34b0639223698e776825841ba3807614931ec","ssdeep":"","tlshash":"c0f0c0ca99f036a2484d57ecc166e40a264b432a73cc4f90b03c5f385ba5a9a554ab97","size":553,"data":"","first_seen":"2025-11-19T03:23:54.981012Z","last_seen":"2025-11-19T08:32:11.467661Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/k4f2ead0b-D31lNMeY.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8fb496d877775c69ef330cef5bfbb431","sha1":"338e4af9dbc128f6de57ba67e3d620796c33a641","sha256":"94b92a8a5e4278ab67a85e23f828fe0cb4e123365dce8fc96cce9334205688f2","sha512":"09c317e7646ce001d4503e75e13644001ec276ac00f4879a10ce80b9323353ea0a03946d4eabff8b82f9f1e17ab2aa99fbdc0067319d003ec72d948ff93fd374","ssdeep":"","tlshash":"4d4184ad80e49574c1946aec9223e532349e4433396ccfa5e27e8e311bbde5150f0632","size":2194,"data":"","first_seen":"2025-11-18T22:40:06.259162Z","last_seen":"2025-11-19T08:34:50.813457Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntechone.com/stattag.js","fqdn":"cdntechone.com","domain":"cdntechone.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80d7433dbc2b7708f2fa4e6a9943a116","sha1":"350c6e2bb1cbd07de260856f918f4ececcd96894","sha256":"54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251","sha512":"6c065d9d4d04b7c4a11ae28751a711a064410055e1db34daed1c74d98f0257a304481bbf2af96b0845075f43d43bafeab34a49241a2a63f967fc0867748f6052","ssdeep":"384:WDC77FbFjbRN8h+eYFCatOJ39BEisNWP7gDhlPQ5EKQIkT8:d771Ff8h+eYFC/JNYa71","tlshash":"ac72e8c631a474afc6c292f04a7f092ef768509060be2986c1d5b4ec5ab51cee7c3f95","size":16490,"data":"","first_seen":"2024-07-11T14:08:01Z","last_seen":"2026-04-03T10:34:56.693266Z","times_seen":9003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/wheel-plane/1859/ja.html","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"15505b2350e129b787d479f7507edee9","sha1":"09ccb3a84e7f25a30bf97594c9c98b6878fd4483","sha256":"53b6bbda82ae145cfc0fb1941cb035359d1c8b298798339cf53f5a543836ad65","sha512":"970991ac74c61bd2a25fe8a331be62b328d99d1f04b87a83cf50deda9d4d6b68a04403ba120796b1e2f9de04af78d640626fb95d2370907f4b626385f0562178","ssdeep":"","tlshash":"3a61947813111bb33ddda0a9dd286ec3dda51834859a887e784e5cf30658e4381bebb9","size":3462,"data":"","first_seen":"2025-06-11T22:43:11.360804Z","last_seen":"2026-04-03T19:02:22.737459Z","times_seen":7176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/s86e85df1e-DHM0zuVP.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c8220eee0a5960b515fa6cce5bc7d70f","sha1":"8b3f96503287f8e4d155266e576847bc816f11ba","sha256":"73f69f6216d22e5c2ab72cbb2c962cd73971d977f3f394f89ae368d09465ecf9","sha512":"08e4f664b4103aea8cf8f6527a290073c75aa15032115148cc5e9813ae1094ee407fca023c5f26bdf57440ef0c480011336bb8e0c265f7023ffc0ae0dcd11116","ssdeep":"","tlshash":"9131b7f94ca48d38b1cd4294a6395a0222b5170734e99e96f16b8ef5025cc8e875673e","size":1876,"data":"","first_seen":"2025-11-18T22:40:06.26107Z","last_seen":"2025-11-19T08:34:50.819731Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a5f333af4-4poPkbut.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ee0d6ba7a990acb5ed838edbaf87b9a2","sha1":"47bf14526b20b2ac7a3da3a24765eaeb47b63379","sha256":"7c15e74d515c56a123fba8607a13e7d894604ded9fefdebc02100324e2ce61eb","sha512":"e602229a442a234e441cb1ef851c98e00f127faf84c52c0265a3ed251badbbc1caf74adf832484e345f3017dead7ab682ee390a4b750745ab42cc58d641ee94f","ssdeep":"768:hmkViVNIwko+1Wqg68PvvUuhMWnBInlCYMeYsMinATx+E1lzXf27dWrD651Kj75+:fVhwkxGhWATx+EpubQaxK1fPwx7","tlshash":"fd435f9ed2529fe988b31788b95d2a11b22d0d0ded4991b0ecdf0f16176ec87213b79c","size":59392,"data":"","first_seen":"2025-11-18T22:40:06.239237Z","last_seen":"2025-11-19T08:34:50.816144Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/e44b901f6-D0Atu5Oq.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"631c0a22132921d6950deb91b19c59d9","sha1":"b7410b884d9bc0774633e20777b174d78643f0de","sha256":"67413d4fac81c0f81b501836e510c939d6ddb93e6f5857690a4e3005b170bbd7","sha512":"4081ec90d1a77fddda70babb2b307910052f71731c592897eb03f58a97e799a32c87c067cd31d20b339781721489ea062fde12bb447f2b8ccf043136b1387e8e","ssdeep":"96:jSdrxTEf4z9Uy6lP3Iee+PFHA9w5jfjxD1fKtytNn8ojpuQxed:+drx4O9Uy6dIexdAyb3jnLRE","tlshash":"f8c17659d1751278b02b9d9cd23a221767353323e94ed6b0e0bd2f2023c978497c7663","size":5700,"data":"","first_seen":"2025-11-19T03:23:55.067811Z","last_seen":"2025-11-19T06:49:13.179366Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/wheel-plane/1859/ja.html","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba0f4e77cb3d1968e8bb09e81cc6345e","sha1":"c3dabda4cfc7ed18627ba989f8ae8766b1ce4933","sha256":"7885d6bc09b192bdb9d4b2599239e210ae4b70f1773646a96c97a9a21c184487","sha512":"57baf1a1c836348e36fb6c38e649c142601110dd231faea9bc2a5c9c653c4b014dc4d02b3bbd7dad06a67eb2418bde568ca6f698086f9ce179718b5b1c56261a","ssdeep":"","tlshash":"f3c02bd612f36130f3ab40c7838f31c300207016027840d351014c70101c4494594e30","size":130,"data":"","first_seen":"2023-07-23T05:20:44Z","last_seen":"2026-04-03T16:15:24.27591Z","times_seen":6595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/j95a4948a-CJohSWFF.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f66ec22659bf8db4a9f167508e5e8ac0","sha1":"0cb411ed6ef2fc5282be704a9126688b33e0b468","sha256":"0e401b37ff844fc26fa938b2cd517edc374e9db51ce16b7e28b5e110d8df048f","sha512":"8bb560797adcef0ffa72daddf8c3cccfc655c3830f8c7bf66f97dcd303d3bb6081315716df5064b995634829ee408253d66a232dca76192b87d45347131c5534","ssdeep":"","tlshash":"2ef0c09956e05924c21f11afd92bb1633095107b8a9c0b1af2fc873a07686aee915b43","size":555,"data":"","first_seen":"2025-11-18T22:40:06.245955Z","last_seen":"2025-11-19T08:34:50.815652Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/d6d528200-CJZA7sNx.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/d6d528200-CJZA7sNx.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-220a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8714,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8301)","md5":"fe1971884f1a33c0263260127ed18193","sha1":"fb914355118a54e4367d66e671cedd979992a396","sha256":"d65dcd0fc78da5bc4930559c58284e1aad602dea5ba837073998e99fa783aaa3","sha512":"7d59ff739aa5b55fb0de4bc982aefc3d3096725718c526ff9af857aedca5a2a75ede07cd5bfafe79b8ce11b48d8ff1d2606d76f2c169bb413d7e04a17a6754d8","ssdeep":"192:wxpx4drpKFQZMYHcYSN9URwU6fkQQYiESpJxr3ceQzez8L:wxpx4drpKFItSXUv6fkQQYqxr1Qzez8L","tlshash":"7502294aa1700bbdb4074cece9e1d01643349b55d64fee68f69d4e2836e810823df7a6","first_seen":"2025-11-19T06:49:13.107899Z","last_seen":"2025-11-19T06:49:13.107899Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/m0d7f03-uKiSnrbr.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/m0d7f03-uKiSnrbr.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-1a5\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":421,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (421), with no line terminators","md5":"ddb08ad6fcb495956ecb5a55ba472d9a","sha1":"c5ddb6e22c1d5c337d4a6fd5acfaed754027b2b3","sha256":"8b7814b13adc6d7caf9d50533aa86899827e596a04ac827d2f276294a05306dc","sha512":"7688e93e884751699f683cece75af94dafe4a219c19ceae2fb3d90f38f2e63abf4668bfbe2000b3735f28c567801580d06f0d27c73289abcd8e758b0a3cc9dfd","ssdeep":"","tlshash":"e3e0e5984ae09ad9419e26ded616540265c81863179c4f61a6b80a382775bceca08347","first_seen":"2025-06-24T19:07:51.329462Z","last_seen":"2025-12-16T11:57:19.837877Z","times_seen":1806,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/favicon.svg","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-04-03T16:27:04.894813Z","times_seen":16112,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntechone.com/stattag.js","fqdn":"cdntechone.com","domain":"cdntechone.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdntechone.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 10:37:11 GMT","end":"Sat, 03 Jan 2026 11:35:39 GMT"},"fingerprint":{"sha1":"1C:EA:64:D2:D2:27:D8:F8:14:68:7A:01:A6:9B:4E:C4:C7:D5:B8:DE","sha256":"4B:C9:99:7C:8C:A3:85:BD:17:9A:F8:0F:83:73:65:9E:67:73:5E:2C:89:B3:5F:84:D3:E2:5D:D8:FA:8F:FD:BA"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: cdntechone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://datatechone.com/\u003e; rel=preconnect; crossorigin, \u003chttps://datatechonert.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9yknF4zBqodotIda7uB7%2FOH68GjCHuwg47QAjw9w9XkeafVpydVkTSzzKeZvKj3wk%2BTyYKM9CigPK7lEppVY0jBT23J6tX6%2BbgJyr69T\"}]}\r\nage: 4182\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2b6-406a\"\r\ncontent-encoding: br\r\ncf-ray: 9a0dc38b1c030883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16490,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15840)","md5":"80d7433dbc2b7708f2fa4e6a9943a116","sha1":"350c6e2bb1cbd07de260856f918f4ececcd96894","sha256":"54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251","sha512":"6c065d9d4d04b7c4a11ae28751a711a064410055e1db34daed1c74d98f0257a304481bbf2af96b0845075f43d43bafeab34a49241a2a63f967fc0867748f6052","ssdeep":"384:WDC77FbFjbRN8h+eYFCatOJ39BEisNWP7gDhlPQ5EKQIkT8:d771Ff8h+eYFC/JNYa71","tlshash":"ac72e8c631a474afc6c292f04a7f092ef768509060be2986c1d5b4ec5ab51cee7c3f95","first_seen":"2024-07-11T14:08:01Z","last_seen":"2026-04-03T10:34:56.693266Z","times_seen":9003,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":52,"dns":33,"connect":1,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"cdntechone.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/u232fd01a-DERIcQgS.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/u232fd01a-DERIcQgS.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-498\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1175)","md5":"f9231ffb61449fbfbd5eb9543c28dd0e","sha1":"6cdaf3d78d81a768a9a6b2e0916c429553c3062a","sha256":"033b4bcf8f67882506bb382c91ea88583bd88d13778a45f61cb48e78a190c66b","sha512":"9996bb31e1db697b49ba7cfb68c5cf15d8aef0245b566dc68b929770a2ec5b720b03b6a7a89420b051bbff2db958b5ee7ff7c76acda633b36a9de8d0dc0626f4","ssdeep":"","tlshash":"cb21a788a1a007bd460701ade21d6005384702338f8e9f91d2fc563d07a64efd91af85","first_seen":"2025-11-18T22:40:06.24312Z","last_seen":"2025-11-19T06:49:13.113802Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/wheel-plane/1859/ja.html","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-19T06:48:45.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /wheel-plane/1859/ja.html HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 19 Nov 2025 06:48:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Astro:5.12.3","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121723,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"8e52c1a98b88162a252f0b72e26d1f6b","sha1":"5f2cc99d717280ecba207a8338c7ec78f9176f96","sha256":"1da5197c30cbaa129e115f1c4f14469e902eabef5fac7b3e54204e6635e488e3","sha512":"f535febd766a4e834d4d7cefa584c412df5cafb6a61913b8f49ee1def0f8fafb032117751d9de229ffef9f32c48554c3fdbdc3cf44908d508c1477d94df7a47a","ssdeep":"3072:4fGf9fbvMqQ9Hz5ea7IgIhBTs1q9PTi9eP+ssn2RZK:YafgnH9ea7IgIhBTs1qti9eP+ssn2HK","tlshash":"b4c3094b96b306292d2e77a0d096bb04e19bf74bf7e67bc4683900215bc25dd3b73690","first_seen":"2025-11-19T06:49:13.114732Z","last_seen":"2025-11-19T06:49:13.114732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":144,"dns":99,"connect":19,"send":0,"wait":38,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/t2836d36b-CElx2Gth.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/t2836d36b-CElx2Gth.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-21b1\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8625,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8064)","md5":"263ab6098f0cd4f1a685fec4ce61b31e","sha1":"2714c02886bac211c4f15930351975c57db217a4","sha256":"491834d067df3e9fed66afbdb4470e7ad2a25c251efc9520cdcd0fdf077adee5","sha512":"8d28e13068cb92890c4cbd58f1855729f8b72b478ecbece25f8ad168ba2816cd5f040c6dbcbaa550bc1757b9c716304c9dedcd75f0ae881ac7d89be6244ad262","ssdeep":"192:BxpWdi+rFNuz3k83gZYjuUHubYD5XJkdlFEq4Db0jPQhbqE3BegG/6:BxpWdi+rFNuz083CUHubYD5XJMERX0ro","tlshash":"6d022a88a0d61d3cd1da8cfda4608069b23f0a59e95fd5d1c3ee9ca80194d4452fbf8f","first_seen":"2025-11-18T22:40:06.256041Z","last_seen":"2025-11-19T08:34:50.794241Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/j9a97c2b7-EDT8vbzv.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/j9a97c2b7-EDT8vbzv.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-1c1\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":449,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (449), with no line terminators","md5":"b8cde6ce7b828d7978b561334a939d3f","sha1":"6515525ca676604d3bbc6013cd5aad24f075441a","sha256":"5776f97a4ed71fcff3679b042c364269b6eebb50caae2831df08951b587d0e17","sha512":"4c4865881335a5e01985b5ef14079efe71da7fbd640cbfdd8e61991c5a4895f5c3abf2e800a010a8e28f099f89874f0d4b2a2e0d80b55c0fa302d63d42a4c0ce","ssdeep":"","tlshash":"5df05c91e7f04a5a402a126ecd87454531a85077538d4f12a2bc8b3653a9aca6d05743","first_seen":"2025-11-19T06:49:13.128557Z","last_seen":"2025-11-19T06:49:13.128557Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/r17dd567-DIDTAZAh.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/r17dd567-DIDTAZAh.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-1d3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":467,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (467), with no line terminators","md5":"d4e3154bf4ad11b9d13a572d0cffbb36","sha1":"49e3689e08a214e7eeb64fe75a6b4d8468231294","sha256":"bb4dbc04ea2129872cf453bbc22e34378729faebcad86ab92374493bf00446b6","sha512":"c46a5b3b97fb792012249c8386046cf7e2e1e918af7e29cc003c79f5b476143330ea4622593abdfab704271db5e4aef5e70cd8fa7aaccc1372ece14d6be95c6c","ssdeep":"","tlshash":"daf0d4c509f11794411f269dc227244031d501b7875ccb00e17c472967598bfb900753","first_seen":"2025-11-18T22:40:06.237968Z","last_seen":"2025-11-19T08:34:50.816713Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/t21f5d50d-BW7-kLfr.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/t21f5d50d-BW7-kLfr.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-545\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1349,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1349), with no line terminators","md5":"8b477b4574274c91fc8d7f1a3f0b2754","sha1":"0f9158f14db03b8cf362fd2bc65ae88177e28001","sha256":"f82f61960abf1eb288ac70c23514b6d6962ac0397a5f65af4e8d26af58147655","sha512":"87465c3d27866935a18fe28779d2a8abb3cec245ab609ce8780f17f23768fbf692ef087836ed3f663dafeaf8ce8ecffae3c754e06b4660b4a8dfa8396fdc5e4d","ssdeep":"","tlshash":"1d21fe8eec7096bc842e4dbce156e431571923afa658c370d48e9e791350787b83bb03","first_seen":"2025-11-18T23:20:06.514193Z","last_seen":"2025-11-19T08:32:11.474983Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/q1734c3-B8Q11vCY.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/q1734c3-B8Q11vCY.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-4ce4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19683)","md5":"3012c09291643865814261a7e35b46c1","sha1":"301427ff9b08b484bc385cec07df40094ece6583","sha256":"2515b3a44847c1a8ff9160a6f0fae66a76c2528cd4e8f7a544e8a72c75be3519","sha512":"605bcb9604e458f30c2829398bb2b4e16251cae58dbfccd3b5d184dc39a0639e583b13b39a4b0f319c6dd1b7ea21b1320cafb86ba6d23fff0dc2b8187c4399bf","ssdeep":"384:Er7nxH8X2KrGUE950vUToPmzN+VzvOTnK:c7xgjrT25lToPVjOTK","tlshash":"7292eaf0935c51d5d51e07bdea3d60e1a2392effabcd828072a8bda5546c2d12e08fd1","first_seen":"2025-11-19T06:49:13.135188Z","last_seen":"2025-11-19T06:49:13.135188Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/k4f2ead0b-D31lNMeY.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/k4f2ead0b-D31lNMeY.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-892\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2194,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2193)","md5":"8fb496d877775c69ef330cef5bfbb431","sha1":"338e4af9dbc128f6de57ba67e3d620796c33a641","sha256":"94b92a8a5e4278ab67a85e23f828fe0cb4e123365dce8fc96cce9334205688f2","sha512":"09c317e7646ce001d4503e75e13644001ec276ac00f4879a10ce80b9323353ea0a03946d4eabff8b82f9f1e17ab2aa99fbdc0067319d003ec72d948ff93fd374","ssdeep":"","tlshash":"4d4184ad80e49574c1946aec9223e532349e4433396ccfa5e27e8e311bbde5150f0632","first_seen":"2025-11-18T22:40:06.259162Z","last_seen":"2025-11-19T08:34:50.813457Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 556\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 83958a40aa546f5109e679bb9cb77d89\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a\u0026ruid=4032ad54-9455-4761-b936-5c3ebe3055b6","fqdn":"datatechonert.com","domain":"datatechonert.com","tld":"com"},"ip":{"addr":"139.45.195.253","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datatechonert.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Tue, 23 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"ED:87:7A:7D:70:58:7C:01:53:C0:A9:07:3B:14:A3:60:48:86:04:72","sha256":"A3:45:F2:05:D1:B6:89:92:B3:05:C2:75:20:48:5F:3C:AA:EB:B3:A9:32:5E:CF:38:C4:37:CD:C0:B9:57:CA:E8"}}},"request":{"raw":"POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a\u0026ruid=4032ad54-9455-4761-b936-5c3ebe3055b6 HTTP/1.1\r\nHost: datatechonert.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1348\r\nOrigin: https://cdn.yxrcr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Wed, 19 Nov 2025 06:48:47 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://cdn.yxrcr.com\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-04-03T19:29:32.511911Z","times_seen":55964,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":136,"dns":13,"connect":27,"send":0,"wait":27,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/wheel-plane/1859/ja.html","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-19T06:48:46.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /wheel-plane/1859/ja.html HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Astro:5.12.3","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]}],"data":{"size":121723,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"8e52c1a98b88162a252f0b72e26d1f6b","sha1":"5f2cc99d717280ecba207a8338c7ec78f9176f96","sha256":"1da5197c30cbaa129e115f1c4f14469e902eabef5fac7b3e54204e6635e488e3","sha512":"f535febd766a4e834d4d7cefa584c412df5cafb6a61913b8f49ee1def0f8fafb032117751d9de229ffef9f32c48554c3fdbdc3cf44908d508c1477d94df7a47a","ssdeep":"3072:4fGf9fbvMqQ9Hz5ea7IgIhBTs1q9PTi9eP+ssn2RZK:YafgnH9ea7IgIhBTs1qti9eP+ssn2HK","tlshash":"b4c3094b96b306292d2e77a0d096bb04e19bf74bf7e67bc4683900215bc25dd3b73690","first_seen":"2025-11-19T06:49:13.114732Z","last_seen":"2025-11-19T06:49:13.114732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a7b6e2-CW4DfmOR.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/a7b6e2-CW4DfmOR.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-14de\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5342,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5342), with no line terminators","md5":"78594178eff45c4c05a509414e2cd020","sha1":"3ee1b2ae43941764ddaa49dbe06785fc963dac4e","sha256":"d5f16a40f7060b9ce0994a1feea628e1319b4da922dd0d9b4f752e695e8e7421","sha512":"3d0e98096888ebac253412eabd87c1c263f6b2959a00ce25195ff7f977f7c5a2df0d70daf4164de9c9a7c5b963b36905b727f6a2955c0494e235e8f3b9ea16da","ssdeep":"96:+7K9PuRatXbWQIlnwUjOq099YTGDQjgHQjski8Qj0zVzxJLIM9ysxmgUO+sszEQ6:IjOSPnGq099Yan/8dzVzfIM9vxmgUO+i","tlshash":"f2b1b4d4d499dafd0dff5ade2590d16273108f073c4bda24b2a14c1927f9c0661bab4b","first_seen":"2025-11-18T22:40:06.224046Z","last_seen":"2025-11-19T08:34:50.802122Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/s68b30caa-Bz2GfXOz.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/s68b30caa-Bz2GfXOz.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-1c4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":452,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (452), with no line terminators","md5":"1d016aedfce775d9d19c7015048a129e","sha1":"93e9c91f6a9c671cc9ba5acbd622b0d68416c052","sha256":"e03774b807fe666ba742d11b23092423a65a47d6743bde80489f7e5facf3d289","sha512":"e1273788a9afb6efd0d2028d0a7e741818d09b806851cb62fe0649c0e2440e5aa4c0093f91a53da54936340d123f3004309d4d8c3427b4490c8d098ab5fc786b","ssdeep":"","tlshash":"6ef055496bf40e05812a22adcb46d11071ea0073a2cc0f61e23c073a43aabcd99842c3","first_seen":"2025-11-19T06:49:13.140981Z","last_seen":"2025-11-19T06:49:13.140981Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/e587d026-DSBcpPg7.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/e587d026-DSBcpPg7.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-6d9\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1753,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1752)","md5":"79d10e1dfc53db4720e495a16493a06b","sha1":"df9bfb144bd3c6d7211fe900f6395028eca53d22","sha256":"8bf978d0cdf793dd88e74c92d17d35c78d3ed5a5c5dc48eeaf05dbf33e0bc97d","sha512":"63827cf276362125f5a6f252d2c816245f5b9aa43cf4b0003621c8f19743ff1a30703f4460ca23de5d3e09cfbceb8475830ba9c22fb6c282a8d159cf9c57f99c","ssdeep":"","tlshash":"ce313f8e2ae12931812914edf5377184b07f10a6724f85d0c02d8e763e9e9cbc7b668f","first_seen":"2025-11-18T22:40:06.22969Z","last_seen":"2025-11-19T08:34:50.818241Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:47.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 847\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: db9b393f2d75e9f618ab360a6768c0f4\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 21 Nov 2025 06:48:47 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 773\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 20c5fb21a8f001acaac9aeeea12bc9f7\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/g15ebb895e-BUN8D5tx.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/g15ebb895e-BUN8D5tx.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-1c2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":450,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (450), with no line terminators","md5":"36d5f54a2e4eb61b1049e6e88e2090df","sha1":"87b79456904ab922451a8fde25ede04d36cc88d9","sha256":"76ddbd9d28d2dcdfde92ce4acf446c498cc89d24a74a1f800b922f28253b3b70","sha512":"c15912ee6fba3df03112ccedfccf6f683c5e697f38138069df8ac97c68fac51a961fbb7c27a5f0b282b0640b92686f184a98d52167780cd0a695d279d95838ac","ssdeep":"","tlshash":"98f05c815ff5ad14403512adcba6187436ad0173d6dc8f11e17ccb3a13a9dce6a00347","first_seen":"2025-11-19T06:49:13.142904Z","last_seen":"2025-11-19T06:49:13.142904Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b43cf2c-QMDgqyVC.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/b43cf2c-QMDgqyVC.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-aba\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2746,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2745)","md5":"1f0fff538dc68452012edfe7a8836ef2","sha1":"110f834151c99003d26fcafbf81b47d30594a001","sha256":"c3d51364e63189becac42410be9934eff2b46e132e9c079f3de85cfacce05a02","sha512":"2d6b14da8922451ec5e9513880059a4bdb116ae9cc95dd94b8d37e03b28d2e31c8a2c931497a806f4ef3c7675d782027804c734f4e6695df4efd936a376029aa","ssdeep":"","tlshash":"5751c5bf84c8a8b90a4db1add636d1622e1828523d1dc4e1a4bd4d1d23d6093e17df2b","first_seen":"2025-11-18T22:40:06.247055Z","last_seen":"2025-11-19T08:34:50.801594Z","times_seen":10,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/cfa52b30-CLqYhhw6.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/cfa52b30-CLqYhhw6.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-95c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2395)","md5":"02b89f6693e28523c854796a17668ce1","sha1":"f433a53b9fc89c36f5716f24572b1027cd941d59","sha256":"3dcc6185260d76830f1c46fb646e2da99d120c936e593d95ebc0a55cb67cf262","sha512":"bf76975cdb1c809e215c75919325a2eeb69076b7944f7ab8418f37096415031cdc40611d9794a8ff8489a004daff7d21aa7d9eb8c6a85d37202949d59da92ede","ssdeep":"","tlshash":"18412003b171d2b59155789fcba2324ebbb097572ae4c5b8fc384d2053c858b8b2d329","first_seen":"2025-11-18T22:40:06.218963Z","last_seen":"2025-11-19T08:34:50.804106Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f11393e4-DidGunfV.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/f11393e4-DidGunfV.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-1c5\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":453,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (453), with no line terminators","md5":"9428a201f63e1f12d712c80682b29cb5","sha1":"0db5998e268be9e883d2b58c15501e6e419fff3a","sha256":"2a0d816bcaf79edd78c1a4e8dc0e5c17dc8cfa40d0706595453056d7d1c44c15","sha512":"05640c387feeb196ef61c323bca64a0c17e904d23deffb4a40f27f53ae006963e1ee1a93e87e34087bd089a7cbe48bc9604126fc76f64f79535b4bb9e967be77","ssdeep":"","tlshash":"24f05c49a7f09e29d059129dd145b6017baa0233eacc4f51a2b84637539dbcf4d14243","first_seen":"2025-11-19T06:49:13.145161Z","last_seen":"2025-11-19T06:49:13.145161Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/o860ae347-WUggEIoU.webp","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/o860ae347-WUggEIoU.webp HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5004\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: \"691c946b-138c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5004,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb0e8d921b8b8ce75be4fbe630ebaa82","sha1":"d4817274b33ef5ac7cc350babbc77f1fa84c5fbd","sha256":"6f83342ed01d498e4c79260aa1f8818a10430300b8cf9862056c73b8532b268a","sha512":"eb5ad49f3375a60f54cf486066d634d1ef74138e2cf747a1664fd717fad7bd36f6b1a84a021b647096b35d8a9b1f368dfdc9f90293843dc31503b07c8f617dee","ssdeep":"96:D0zkkY1s0tgj90I6RiNudHj7nxiBOEZz8Vht4kkt:ozQ1i6iN2DbfEZ8tk","tlshash":"b2a18e3dea92feadc03743b89344af75f5841b6647d4a3ba12cd540dc6c8e44f6481e5","first_seen":"2025-01-12T23:36:31.206085Z","last_seen":"2026-04-03T10:34:56.736934Z","times_seen":411,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/h8d9f44-D7IBIoto.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/h8d9f44-D7IBIoto.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-675\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1653,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1653), with no line terminators","md5":"ca1dc5fb239a1d433f9d9d67d1369181","sha1":"8c7201e29425a82ce7a3302c765306f59ca27bf5","sha256":"5fc8b4482936f3f45be697a6e8dc8049e31cc1939ea3f9d84b6d70fc53a0d7d0","sha512":"ea9f04209b3d0f7beed2fa35b9280decd4509cc9c69b490e70c6ecb071ac57d7af332b52b2c30d97c0276b56edb54c6d9d914a68d002cba4d04f087f29b01958","ssdeep":"","tlshash":"da31748ce8509bac943e29bdd25d12257f05276b13aacf0192b9753b12a82c9a701f13","first_seen":"2025-11-18T22:40:06.252032Z","last_seen":"2025-11-19T08:34:50.797952Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/h198e69-CrLPkp20.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/h198e69-CrLPkp20.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-e95\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3733,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3733), with no line terminators","md5":"5869fa6554ea4197359f05c6ecd8fa45","sha1":"7547d08782805f63ca91036e1e2e915fa8cf3395","sha256":"7e47662534b472d9db3017d4c32343702943c1b4c21ad6a7097de7898f7bb27a","sha512":"41cd9733177ebc47605f758eb9e8d7df090b4254109d0236f32e4746752ef4e90f9720a30d666051045648cbd1b845b8995df8c3286d60afc29a2924265682d3","ssdeep":"","tlshash":"4471c5cec8d58934418e21ee1028126076ba8e5b753d87c890bd4f794faca0ed485f5b","first_seen":"2025-11-18T22:40:06.218065Z","last_seen":"2025-11-19T08:34:50.797315Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/c945ea49-z-DJgWiD.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/c945ea49-z-DJgWiD.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-2d2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (721)","md5":"17d01840233fecfc8c28d421b528bc36","sha1":"1a7cc00b2a16466919eaa042f57931e8b94552b7","sha256":"873f31a1739fc05156442b1300bb1d649aeb2474f5796ef3fd9be002f388c7c4","sha512":"29717ca54aa3b1c3c149cafdd3f1777c676be255b09b4495654017bd8206836c974897204e85d2198c9993d44f572d785da5513eb42424fd979a7c44ad413c48","ssdeep":"","tlshash":"ff019ccfd9e0f658854b22ecc1652013629512b75f8d6f91b1bd4a3d0ba2197940eb07","first_seen":"2025-11-18T22:40:06.240286Z","last_seen":"2025-11-19T08:34:50.802764Z","times_seen":10,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/i7474a7cc-BgU3jhM5.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/i7474a7cc-BgU3jhM5.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-5e6\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1510,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1510), with no line terminators","md5":"28995a930907fcc9785ecd35901be5a1","sha1":"d04d05cd8f61b7bf01b75c5de48071d57f4e7605","sha256":"98f403fccc6c4453495aaf783cd70cbd82af2e8f140af00a2962700d40931da4","sha512":"172ed14a6c8281ac396ec8419b2ffc4cc057449e145a27eeb3c16f1f905daab9f66aecbe18bc9cca64981ab7d42024ee3277d7f96b294e712f85bfb18400a1f4","ssdeep":"","tlshash":"e731558d98b0a2f881ae09ecd11cdc2123180227a24da690d02e8f39172de8fa117f83","first_seen":"2025-11-18T22:40:06.230553Z","last_seen":"2025-11-19T08:32:11.469544Z","times_seen":8,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/s86e85df1e-DHM0zuVP.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/s86e85df1e-DHM0zuVP.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-754\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1876,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1876), with no line terminators","md5":"c8220eee0a5960b515fa6cce5bc7d70f","sha1":"8b3f96503287f8e4d155266e576847bc816f11ba","sha256":"73f69f6216d22e5c2ab72cbb2c962cd73971d977f3f394f89ae368d09465ecf9","sha512":"08e4f664b4103aea8cf8f6527a290073c75aa15032115148cc5e9813ae1094ee407fca023c5f26bdf57440ef0c480011336bb8e0c265f7023ffc0ae0dcd11116","ssdeep":"","tlshash":"9131b7f94ca48d38b1cd4294a6395a0222b5170734e99e96f16b8ef5025cc8e875673e","first_seen":"2025-11-18T22:40:06.26107Z","last_seen":"2025-11-19T08:34:50.819731Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b0d16a5d2-CvcI12Oz.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/b0d16a5d2-CvcI12Oz.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-1c3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":451,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (451), with no line terminators","md5":"5a39678bc580e77aef75889fb4a79d89","sha1":"316477261061fc1b601d42933854aaedb443f659","sha256":"a4f70c1296537997ad692a1b5b33f27adf0595b55c3fa7475c4ad50c73ee59bf","sha512":"58519ef4c82e15a073e48f40d48baf94cbcf8514b76d6471918c4103f8600c361f5ff9a85203eeb6e6a082edbabe97eb076dc9384334e4b1834da5b2e2834759","ssdeep":"","tlshash":"dcf027896af0e91dd07b23aed5569208399d206796cc5f11d2bc4727636aa8e5a40343","first_seen":"2025-11-19T06:49:13.155937Z","last_seen":"2025-11-19T06:49:13.155937Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/d96092b5-muLwubwV.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/d96092b5-muLwubwV.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-1c3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":451,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (451), with no line terminators","md5":"15f351fb46171e73c9570608b0b1f26a","sha1":"7acd2eedadfb14909e96cdfe65108ff8a72ba233","sha256":"5a7d11ad214321c088314d8e4e241ccf94478613fc884cd4ed1ee866898f8dcd","sha512":"1ec25e2be772964d56795bd4d455f4e39f93c96975e21143e49188627e0669e18f7752cd2a785600d390a8fa69d35b5092e20f7d5bab6aaf83f35fcf6f6ac3f4","ssdeep":"","tlshash":"7af05c98aaf17a24603d179dc6535a017289156387dd1f21d2bc063a836deceaa11383","first_seen":"2025-11-19T06:49:13.157084Z","last_seen":"2025-11-19T06:49:13.157084Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/fonts/ef9f0e0f5104d1b1.woff","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/fonts/ef9f0e0f5104d1b1.woff HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cdn.yxrcr.com/wheel-plane/1859/ja.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 56576\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: \"691c946c-dd00\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56576,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 56576, version 1.1","md5":"5124fc87f7e66441db795a8912043f91","sha1":"9b5c62e91aa66a514d484f39b22e7ffc9381cc18","sha256":"a2aea7fa4bd1d898403a770bc2a4ff45e48254f81be851732df29e8437414041","sha512":"f969df99917bfee75a09c50e7016dcba4446775b92a5263d3aa678202961baf2bf4d395711663b95f4a47add649a91e86a58a4c742a4c1f1081d68fcdad9cec5","ssdeep":"1536:lhPdeGApA3bIFUVp+DLy5lZQK4EtEglGzIQeVSc:XlexpAEFUpWL2ZNjUYSc","tlshash":"ea43f24e9ecd710fff8a7ab7d998695b818f6094866e75c33141227ef839280d4b6306","first_seen":"2025-10-17T10:36:57.958595Z","last_seen":"2026-04-03T05:39:53.253114Z","times_seen":885,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a3a30e-DTCxJq5X.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/a3a30e-DTCxJq5X.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-be0\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3039)","md5":"a7626e6a35aee1e080671f766cb2a07d","sha1":"4cffbec6d81e9e584f7981f327c2507eb32fd0ba","sha256":"10a26cca023b7468028f835c033eacff57148d8273b785eedfc9ac8792b1ce99","sha512":"bba729b1bcb7b7295db272ce267a43fa8a44384c12d4935f16755e6f39e141da6845dc28687f08edd508b1f666159a2a6cca7291fea97d55c520c586444cccd3","ssdeep":"","tlshash":"2d51e18fd02620594e95cfbcb87525173ae7c22a3dc68d4863d4d83c41e4bd622bf7a5","first_seen":"2025-11-18T22:40:06.262472Z","last_seen":"2025-11-19T08:34:50.814044Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/favicon-96x96.png","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-04-03T16:27:04.894813Z","times_seen":16112,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/a5f333af4-4poPkbut.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/a5f333af4-4poPkbut.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-e800\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59392,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (59392), with no line terminators","md5":"ee0d6ba7a990acb5ed838edbaf87b9a2","sha1":"47bf14526b20b2ac7a3da3a24765eaeb47b63379","sha256":"7c15e74d515c56a123fba8607a13e7d894604ded9fefdebc02100324e2ce61eb","sha512":"e602229a442a234e441cb1ef851c98e00f127faf84c52c0265a3ed251badbbc1caf74adf832484e345f3017dead7ab682ee390a4b750745ab42cc58d641ee94f","ssdeep":"768:hmkViVNIwko+1Wqg68PvvUuhMWnBInlCYMeYsMinATx+E1lzXf27dWrD651Kj75+:fVhwkxGhWATx+EpubQaxK1fPwx7","tlshash":"fd435f9ed2529fe988b31788b95d2a11b22d0d0ded4991b0ecdf0f16176ec87213b79c","first_seen":"2025-11-18T22:40:06.239237Z","last_seen":"2025-11-19T08:34:50.816144Z","times_seen":10,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/p525c8e-BMnBQsRY.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/p525c8e-BMnBQsRY.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-54a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1354), with no line terminators","md5":"d3275b6dc314b3bb21c3eec17d4fc60c","sha1":"5bfc31edae1eb7f1cdb5e4fd37da824dd62362e1","sha256":"1e0749cea1416981b5dbd4cbaa896be012fe4860c0b5866030e937f98ee28308","sha512":"458e9e5d1dd65bda880f3b8a819dc4a9957a9b8fb630c0baf6b4b87683b9ddb761d6de512a7f49bcf6908d3e1e1ceb48df971bfb06b0943e2092f4c96c404da7","ssdeep":"","tlshash":"a82111c2b2b2a07c17b516ace0327341f545896567cdc6d0a26a02752ee4dabec3162b","first_seen":"2025-11-18T22:40:06.2602Z","last_seen":"2025-11-19T08:34:50.794784Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/e89d6de-CstSi-vg.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/e89d6de-CstSi-vg.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-2d0\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":720,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (719)","md5":"8c75f4f8b1ef8f394ae7a51303fe09bf","sha1":"1861fa3f69d1b42eeb2ea1c17e608245fa3991d6","sha256":"ecea0d7bbbfbe67d05ee4f62d33dce6c971e3b8a0a35be51f5d3b998063b7947","sha512":"57fa49976d7200651323628b0a21a2f8a4f9db3f630a860b054669846de6f2d206cbb1d1d983172efe2198c0192bb6a0f9bcd202837bc0788bb84b2186344452","ssdeep":"","tlshash":"6001108467f05b5cc02826dee51da00572890469bb8cdbe1e1bc9a2983895d6a5a0b23","first_seen":"2025-11-19T06:49:13.16349Z","last_seen":"2025-11-19T08:32:11.455122Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 693\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: f3450f895bae520af654988c5a086cc4\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f8103a250-CCNtYbmx.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/f8103a250-CCNtYbmx.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-720\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1824,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1823)","md5":"65ed510cddbd86df9d0d5eb87a43d21a","sha1":"57c45c23844c715133a33344c3361be877dd1706","sha256":"619f4ef870c2b826a14d5b9debe822c17f10c238de361e1be52f4f11d7dfb0cf","sha512":"0d9283c432e84461c18596c15e3e88accea20e31308d46d8a9ceb082537622c258a10219f2f859a396eccb7f094084e74a6d31d3ade2a9b54183240938bc933b","ssdeep":"","tlshash":"603187ccc191667ce47f07a8c06d605eb7054773eb5f8f94e2be94351256c54620bf51","first_seen":"2025-11-18T23:20:06.511515Z","last_seen":"2025-11-19T06:49:13.164924Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b333d01bd7-Ce0NAr8b.webp","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/b333d01bd7-Ce0NAr8b.webp HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1636\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: \"691c946c-664\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5a1adcee8a49f5914328c4e2d64e63f1","sha1":"345da1a9fd93368a561aa05f7f1441dc14667127","sha256":"3dfd33d676d8ef7f093a3baeac061ea7fab7b3ff8d254daa99dce64441c71571","sha512":"7568a1fffe2bbda318bc956796aeb4894748a878275094a3b1d4d722d1ed280db039e7c3f54b68bdae9a62feb890a3d763d8ca66450bac0d01a89b06764fc9d7","ssdeep":"","tlshash":"4231b53a17050f07d5b00bbe96501729af5b3e734ea9c2ab564144172f818d4ed28ae3","first_seen":"2025-01-12T23:36:31.203165Z","last_seen":"2026-04-03T10:34:56.717161Z","times_seen":411,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/j95a4948a-CJohSWFF.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/j95a4948a-CJohSWFF.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-22b\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":555,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (555), with no line terminators","md5":"f66ec22659bf8db4a9f167508e5e8ac0","sha1":"0cb411ed6ef2fc5282be704a9126688b33e0b468","sha256":"0e401b37ff844fc26fa938b2cd517edc374e9db51ce16b7e28b5e110d8df048f","sha512":"8bb560797adcef0ffa72daddf8c3cccfc655c3830f8c7bf66f97dcd303d3bb6081315716df5064b995634829ee408253d66a232dca76192b87d45347131c5534","ssdeep":"","tlshash":"2ef0c09956e05924c21f11afd92bb1633095107b8a9c0b1af2fc873a07686aee915b43","first_seen":"2025-11-18T22:40:06.245955Z","last_seen":"2025-11-19T08:34:50.815652Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/y033f998-C7E3v2yU.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/y033f998-C7E3v2yU.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-818\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2072,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2072), with no line terminators","md5":"e53e949c1fd2b54944b0d6a416fec71a","sha1":"2bf7e9251f6f6eba762e589c5da603524d60344f","sha256":"c19301f85d292b76db7c66515e0027d8112867f2f0ed5183963aa0e1e0c830b3","sha512":"844e363c702480312cf221b0eea60e24677b1939192fe3270c74a3daadd861e6a3f8367e10d1b4a5871b7d834f924134ee1b00894e82ec09e4c9fcc40b1c0a61","ssdeep":"","tlshash":"cd41978169f4a0608ae119fec06481317539ca13376dda47b2ad2d712fa6e1bf467b23","first_seen":"2025-11-18T23:20:06.467604Z","last_seen":"2025-11-19T06:49:13.170129Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/ae06ca88-BaGT9Px6.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/ae06ca88-BaGT9Px6.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-10d2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4306,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4305)","md5":"7a1d75349934126a206e598cee3df92a","sha1":"b62c3de8206b02f582a6b14744b37475f194d127","sha256":"9a6be423a93a2f375fe412dfeebb84a849990eccfd0856f0a2281fdef9dc3672","sha512":"1d1a157e2f226bb6dcfa50b140d93c58dbc539c6b409d919e0a684ea5b219edaba44ad79d84da57e823b0016ad8d91d752bebd287b7ab14cb71560a37c4c1288","ssdeep":"96:z7/jquYz6zuxzvPdBb9QQNaAwNSNg8F/A8qi44:P+uYGSzv1B1g+iyA9V4","tlshash":"e891218fb87920fc7a97c6dda173d1a3163721162989c1b4a5d74f2807a0289a37fb47","first_seen":"2025-11-18T22:40:06.226952Z","last_seen":"2025-11-19T08:34:50.819232Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f473ebc3a--X5F5Mqr.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/f473ebc3a--X5F5Mqr.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-423\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1059,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1059), with no line terminators","md5":"a58dd683e6b4e68cc5b4f6d9540f1da0","sha1":"7efc5eec7ebc8b75252f9a1d6b7f4e70782ffc3b","sha256":"8dffc7f82dbeb72862998d281b05fb9b6e129624cffe231210134f3dc02555f1","sha512":"44ecd63e2aacadf23da6276e1c4fb629646e86bc078c2d8b738b05a51d89b2c8646c6bb509e2d13ea06f2d72f2011ca685b4f22e765cd712ee9eeb15b063f4b3","ssdeep":"","tlshash":"401116497b5c5858005905add014a411020557aa2bda4fe1e1bd557e2b6aede7813f07","first_seen":"2025-11-18T22:40:06.251059Z","last_seen":"2025-11-19T08:34:50.807316Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 609\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 657c68651bc38da57da6753200344f26\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f99392b2-CnIU5txI.webp","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/f99392b2-CnIU5txI.webp HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4538\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: \"691c946b-11ba\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4538,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"30cff9c43d012b1619cc092d54379a0a","sha1":"2ef41df1c08e0a14fff271ae431cc90d806dbdc7","sha256":"58c8cf23b5c2a9e5d4cbc27fd3e97752d2c1fd9afc3ccd161781a4f00ff4cb52","sha512":"8bbc0164b81e626beb98e99bf559e3cafde62860c73a959d0b55f7b4a95bda00292547fa93c11655bacb3aa179dcc5e915d7ac3c4d36dfd00b675d91c703fec8","ssdeep":"96:70zGXtAcXJWW2FJP0JJVjSPuJBNbxxA8H/gFQjYNS3R/:wzYtA6JWWCiquJVxA8HaQk8/","tlshash":"48917d7447a3df09e8b382f2b5470b50cf473db8e644a31a432610de8e5154ed2cc654","first_seen":"2025-01-12T23:36:31.229067Z","last_seen":"2026-04-03T10:34:56.71786Z","times_seen":411,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmscc.com/sync-do","fqdn":"fmscc.com","domain":"fmscc.com","tld":"com"},"ip":{"addr":"104.18.37.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:47.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fmscc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:43:32 GMT","end":"Fri, 13 Feb 2026 15:43:23 GMT"},"fingerprint":{"sha1":"17:EE:8D:B0:F0:B7:85:35:B3:2D:BD:DF:4C:F2:53:75:F4:51:D9:A8","sha256":"BE:13:9C:0C:8C:E2:C9:67:5E:D2:D4:0F:E0:12:7F:E3:0D:B5:DB:0A:3A:3C:3A:3B:7F:FD:31:CF:FC:6E:34:12"}}},"request":{"raw":"POST /sync-do HTTP/1.1\r\nHost: fmscc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 240\r\nOrigin: https://cdn.yxrcr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9a0dc38deab235a6-OSL\r\nvary: Accept-Encoding\r\nx-trace-id: fd0ca4a6342ea85b0a63b00cd100df50\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: https://cdn.yxrcr.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=raBnHo7zl7v2wK4GUtVh_K.1rTx6KhsxNBfPVXjzlKY-1763534927-1.0.1.1-2IRi92LqcNBv5uQOWEjzpIl6Ju.wO3eHFy5UomEJ3T45RCSGfNJ1DYFWrABUAybZhmQJ.cOU6JZrfQ0zkjramr5dVX.7adGo7kwAd_wSrC8; path=/; expires=Wed, 19-Nov-25 07:18:47 GMT; domain=.fmscc.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"71b87650dcc098099504aeb500d83c82","sha1":"1a9643d9c5e52dc826dcdf45f4c2a75fffef8200","sha256":"d3a8cc67680cef1603b26de64be9e21c5dd27db1dd97a4e1b1a70d5b88a6f17e","sha512":"f1e5d367ed2dc04649cf4254b84614c1923476ad5a5be2f4ac0b63508644bcd3b0cae06fd98799b5b7c2c2cd6e8d5783d2bfc81f4946b09512ef72daa2c82daa","ssdeep":"","tlshash":"bad05b1e560d18ffc90119cc39d125d4bfc3c1053ca88c86c043cd5a2bc134104367ce","first_seen":"2025-09-25T10:53:06.771626Z","last_seen":"2025-12-08T15:00:55.832251Z","times_seen":96,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":19,"connect":1,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 487\r\nOrigin: https://cdn.yxrcr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.yxrcr.com/wheel-plane/1859/ja.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 03a5c7093808e14312f30b7521e029fa\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f0bc9b4-CiLIOdbk.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/f0bc9b4-CiLIOdbk.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-401\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1025,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1024)","md5":"0afa668c21787798d4ebd5603597218e","sha1":"1c3d472c621fc301b01199e83594808068f5e6c4","sha256":"1162cd04ab652194b4e5307fdfaee7f06969377b1ecf77dd46cf9723a4889605","sha512":"fefc06141db23f6277223e8f3518c92a9f525de866ebbbf17ad071583104a75e3026715b7d52551a970e5f8078a32f61a2e378119f40b6e7048b3425feeabe77","ssdeep":"","tlshash":"ba11ef8f80d47574441651ffe29ad31231120957678e8b85d2be4e782b24897d151a8b","first_seen":"2025-11-18T23:20:06.484668Z","last_seen":"2025-11-19T06:49:13.175727Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/b0cf3b5-CjXbJDAW.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/b0cf3b5-CjXbJDAW.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-39e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (925)","md5":"2c6978c1f44dd65e719369e81274068f","sha1":"011f2c8f1e7c303bad2462d01dc093d7ddd8b2f1","sha256":"40166a11b4dd55e8f620974ba80c7c502c0f62918bf42ac8bcd1d7427ef9e1ec","sha512":"b27ee1a3fe3950de84cc0c9e0e66330b71dfc8623053974eae747f6769df6d1555f88a5eb3fbd6e29cc9637820eaf29a83245bba1b7f9f832d95bf5e02fb7af5","ssdeep":"","tlshash":"6b11848f09e05698c05b15eed616402136cd007b2bccebc1a2fc8b300b603979160f83","first_seen":"2025-11-18T22:40:06.24913Z","last_seen":"2025-11-19T08:34:50.806192Z","times_seen":10,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/e44b901f6-D0Atu5Oq.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/e44b901f6-D0Atu5Oq.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-1644\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5700,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5468)","md5":"631c0a22132921d6950deb91b19c59d9","sha1":"b7410b884d9bc0774633e20777b174d78643f0de","sha256":"67413d4fac81c0f81b501836e510c939d6ddb93e6f5857690a4e3005b170bbd7","sha512":"4081ec90d1a77fddda70babb2b307910052f71731c592897eb03f58a97e799a32c87c067cd31d20b339781721489ea062fde12bb447f2b8ccf043136b1387e8e","ssdeep":"96:jSdrxTEf4z9Uy6lP3Iee+PFHA9w5jfjxD1fKtytNn8ojpuQxed:+drx4O9Uy6dIexdAyb3jnLRE","tlshash":"f8c17659d1751278b02b9d9cd23a221767353323e94ed6b0e0bd2f2023c978497c7663","first_seen":"2025-11-19T03:23:55.067811Z","last_seen":"2025-11-19T06:49:13.179366Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/o51660d52-DzHc7Lo3.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/o51660d52-DzHc7Lo3.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-c2c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3116,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3106)","md5":"a7c4a05dd97dd3528deb5df39496ada7","sha1":"910f59e15b0cc78d581797a550cb7e87e9c86dda","sha256":"4238adbe1c448d325a04fab465b92cc17fc01ce698ce27165033a232a1a15fa3","sha512":"124e01f18fe03e6a6c218ac3b7b333d8dda30577274d3f061204cd92809afbbdfbd331b1c31bb4ed491f7252698a6d970b805bc196013fd303546ebf3ab07ec5","ssdeep":"","tlshash":"70513599b0b37b7c743f2acce46d5c46f30a2b59d7494e90a16da8312b840c57f5a38d","first_seen":"2025-11-19T06:49:13.180374Z","last_seen":"2025-11-19T06:49:13.180374Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/m1835b9-C738pLZ-.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/m1835b9-C738pLZ-.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-2b4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (691)","md5":"f18c0aa70f8f0d94cd6ced07718902a8","sha1":"79c449b28e42052666191d84c634882d2d1372b7","sha256":"5e2359a24c296dc83654ddb05e072e3f7692ffcb725af1549c3cba2dfd242016","sha512":"76a02e22a4a9d5e7d1f4c33cb038f9c1ab808691615a2f27ec52e41dba789b6b29f81a50b2fdcf94514d0b7cc5d98a072b2f92ea7b0d00b8655a98ff55ebd628","ssdeep":"","tlshash":"c801fe8e54f83e94840a61afd526d22132d5007b668c8b9af2ac5b380766b9fa711b53","first_seen":"2025-11-18T22:40:06.248009Z","last_seen":"2025-11-19T08:34:50.796466Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/n7198d9ba-OcqpJVkJ.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/n7198d9ba-OcqpJVkJ.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-11e58\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73304,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"078f3f3c99f2e60ca365a6a8e23d75bb","sha1":"edf0f28b1ec61d185affe2e5f27f0a9d6438bb0a","sha256":"23fe08000063052d1b9de0fb7fcf65b9536b96a9f43bfa365be546307c1f7899","sha512":"7d95dce01b63a65da2dadf1357849023501bf737a493dac656a3f38aa5f83fb214c36ca270d4c33efd5ac301f4f6ac2887e899634cade5037fd74196c9b1d915","ssdeep":"1536:Hr2RivKGOUC9dpjXOnlVS+NLcgzAyOx+XuPqTeJcvmzhNQ8:HiRMnlM+NLcgzAye+XuPqKJcYa8","tlshash":"f463f88b3391a1145ba9409514ba0403e399fe9e705994e4f6ee54cefb8ccc5f27bb38","first_seen":"2025-11-18T22:40:06.258278Z","last_seen":"2025-11-19T08:34:50.812317Z","times_seen":10,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/y34b147-BJyWnKDw.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/y34b147-BJyWnKDw.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-229\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (552)","md5":"aa44b8387a9d5ac63d3bdca046bb929a","sha1":"5f7b51e8548634d514157030fd0c300192dae82e","sha256":"8c10fc9d28b1e4277a08aadc9a37e6639d12e4216b04f90fc023074543a4fe87","sha512":"b7f1e5e90b5947aa2b4d18094cbd654b92193ef927394d8f75cb9c4a87e81d1e9b72740a7e8081416379a97d5fe34b0639223698e776825841ba3807614931ec","ssdeep":"","tlshash":"c0f0c0ca99f036a2484d57ecc166e40a264b432a73cc4f90b03c5f385ba5a9a554ab97","first_seen":"2025-11-19T03:23:54.981012Z","last_seen":"2025-11-19T08:32:11.467661Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/f1cac53-B4mNhJfU.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/f1cac53-B4mNhJfU.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-ca4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3235)","md5":"d87c0c29d720f3cd10903b7f9d25fe3a","sha1":"0441197c0db8b4ed549537983585c57be6609a62","sha256":"59099420ce18e58309b0338fa10bbb93247b2584a75e72a320a9dbd970a217e7","sha512":"0b732de4f15e38a8717a596bb590f6e78b1938d64e3cfd684698fba119c7b60445a600e0bd5447fdb28ad29e1531217d8527f065c9e802d0dab187548a36d2e0","ssdeep":"","tlshash":"8661146967fa3f6f4c9a2b7a524dc10e0a3d1c0ba489c6346d97cb2cfd5058c38b1b51","first_seen":"2025-11-18T22:40:06.223265Z","last_seen":"2025-11-19T08:34:50.812933Z","times_seen":10,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/cb1107-Bd0cs2sA.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/cb1107-Bd0cs2sA.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-1c4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":452,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (452), with no line terminators","md5":"c85c67800a6a92762bb95c9e1eeb6f0e","sha1":"7b204a80dde0d57a43c27fb57329354249e49fb4","sha256":"f9f88fb7aad4b438a4df2632d2554f3e1174b4d7bfb38b9425f27f209712a19d","sha512":"4f4ed4599337244a18d231dadeff0f272dd1da82236832f32a68779b5d1b29f17f7fc43defacf678cd444ca92be76e694e9b1e07ea74332845a431785cd7829b","ssdeep":"","tlshash":"93f05c8457f41969802a239dc66245443688157b969c5f21e2b80a3e53b6acde9002c7","first_seen":"2025-11-19T06:49:13.186826Z","last_seen":"2025-11-19T06:49:13.186826Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/i52918b75-CVlrvyH0.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/i52918b75-CVlrvyH0.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-3bd\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":957,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (957), with no line terminators","md5":"36d98b82e59a254b46b82e04402a04e3","sha1":"cf2e8e0cde3e97ae12df704bc6bfac5b707785b6","sha256":"ce43ff3b7a959a4b114243c39ad0f46b218fc91a84084c07b3e39a5785da1d3a","sha512":"10791daf0105c2e1996901cf67434c4699a41623b0af9de436b0e65e12019db6f8d471c42679ac50c1bd7dcb8eff3ee855b863441d02847296e336015227d271","ssdeep":"","tlshash":"a611b74f49a05454c00a55edc55a7270b07285bb13cd5f55f0ed1f340b6c29fce60703","first_seen":"2025-11-18T23:20:06.504565Z","last_seen":"2025-11-19T06:49:13.187937Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/m28e3f662-DvGsA-kr.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/m28e3f662-DvGsA-kr.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:44 GMT\r\netag: W/\"691c946c-8a1\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2209,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2207)","md5":"b5e964b8ab60ea1d3a047ca1fa1f797e","sha1":"306ee2781824f7cbd4727a31cbc63ab043955aa7","sha256":"c8c2c47b7f1d9b7207caf9773ba5da788fc06cfbc3d17a76e3d4955f10d28ec9","sha512":"f2de94ccdf3fa60e68e2b87e66ff63b6c97dc4929e7435dc969bd37f8681982cfe82b11dae7cc3c6c55ac22fd13e75a97a1ed04c662e57dd9b83a70ec562ffba","ssdeep":"","tlshash":"13417399b1641b7cf00f455ff66c828fb016b78bcb0eca51f0fc891a2719995a786f81","first_seen":"2025-11-18T22:40:06.228822Z","last_seen":"2025-11-19T08:34:50.806829Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/_astro/l1f7ae85b-BnTovQDf.js","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"GET /_astro/l1f7ae85b-BnTovQDf.js HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Tue, 18 Nov 2025 15:44:43 GMT\r\netag: W/\"691c946b-f829\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Fri, 21 Nov 2025 06:48:46 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63529,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50068)","md5":"6fd30a54ff04420f0b7f2b29e0f0c964","sha1":"4fbea2293b9b7fe892846e47027ab805075335ca","sha256":"ef43ea679c3a412f38d365389f12df49bfcf376f4b45343f0d0bfb43cc85a300","sha512":"7158570354a3d8b77289fa1034bf1d9e8a05cbf5fc26b482e13b315de65a39fb5b6c489ddec8e9e018c0b40b65ffd8a74e3ec38925856879a6c8853e4b4ec8eb","ssdeep":"768:WW5FCDDOqykJ7xlWC3p0NJ8Ej6SKwjAEtMDjG1pvhQ5WGyL22gz6lDNwnfZRFxeY:W4eqs7tARj6CjAEtMDS1prZC","tlshash":"73534a687056203a03ef91e6e0bf6a4bf2356812e48dc644e356cef06fb465d4267f2d","first_seen":"2025-11-18T22:40:06.265212Z","last_seen":"2025-11-19T08:34:50.798483Z","times_seen":10,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=xkj17dav52wpl9gq21m06a495q9oro9","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 15:37:01 GMT","end":"Sat, 24 Jan 2026 16:36:49 GMT"},"fingerprint":{"sha1":"84:49:FF:DC:BD:D8:BA:3D:2F:25:0B:EF:CA:E4:6D:73:79:8C:F9:7D","sha256":"AF:21:94:4D:14:07:CF:FC:E5:3C:3C:F4:AC:47:9E:83:98:6A:62:87:FB:8C:27:43:25:FB:97:CC:47:15:99:4A"}}},"request":{"raw":"GET /gid.js?userId=xkj17dav52wpl9gq21m06a495q9oro9 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cdn.yxrcr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://cdn.yxrcr.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=xkj17dav52wpl9gq21m06a495q9oro9; expires=Thu, 19 Nov 2026 06:48:46 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9a0dc38b1eb7b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7d5f9458cc9800c9579aa93e6ec6aab9","sha1":"0e38092ea9876dd0e175240dda7e0568ccb18bc1","sha256":"1a1ddfb77760c50430cdb40e09c2957ece98e9174ffd0680bec3a7592d2a9d67","sha512":"e29156a78841a3dc6c159810084000a17b05e7322187c73ab4f2605be1594c0d92d61b09bbefd1c7f899d0957d40aab72864372a59a47ed46614ba478d2f2dea","ssdeep":"","tlshash":"e2a0220028bc38c8880000a2280fce00b00000c20c0383088ce0b08032ca0cc008c3ca","first_seen":"2025-11-19T06:49:13.192347Z","last_seen":"2025-11-19T06:49:13.192347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":44,"dns":21,"connect":1,"send":0,"wait":37,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fmscc.com/sync-do","fqdn":"fmscc.com","domain":"fmscc.com","tld":"com"},"ip":{"addr":"104.18.37.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:46.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fmscc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 14:43:32 GMT","end":"Fri, 13 Feb 2026 15:43:23 GMT"},"fingerprint":{"sha1":"17:EE:8D:B0:F0:B7:85:35:B3:2D:BD:DF:4C:F2:53:75:F4:51:D9:A8","sha256":"BE:13:9C:0C:8C:E2:C9:67:5E:D2:D4:0F:E0:12:7F:E3:0D:B5:DB:0A:3A:3C:3A:3B:7F:FD:31:CF:FC:6E:34:12"}}},"request":{"raw":"OPTIONS /sync-do HTTP/1.1\r\nHost: fmscc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://cdn.yxrcr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:47 GMT\r\ncontent-length: 0\r\ncf-ray: 9a0dc38d9d0ba41f-OSL\r\naccess-control-allow-origin: https://cdn.yxrcr.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=6KKjhVvAXcc8l3ONp8q7uxdFro6mHHsMFKHKLqxqOKw-1763534927-1.0.1.1-PLdW2IUJ9LCGT8HumDHHdxJfwFHR.Xr8NILmcR_q8rXlwlz76zKiHkqQbxHEBPiuMxn9UR.9XSiUz0A2JIWDjY32rEz9YXvXk7gr0XGkhEQ; path=/; expires=Wed, 19-Nov-25 07:18:47 GMT; domain=.fmscc.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":43,"dns":11,"connect":3,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.yxrcr.com/sync-metrics","fqdn":"cdn.yxrcr.com","domain":"yxrcr.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.yxrcr.com/wheel-plane/1859/ja.html","date":"2025-11-19T06:48:47.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.yxrcr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 02:33:11 GMT","end":"Tue, 23 Dec 2025 02:33:10 GMT"},"fingerprint":{"sha1":"D7:84:D5:11:52:B7:4D:33:14:8F:D9:23:FF:E1:2A:53:A5:31:41:89","sha256":"0E:E3:40:15:08:F9:52:4F:03:D4:6E:94:21:B9:9D:B8:55:BB:AC:86:F6:79:B7:09:EA:FC:7B:42:44:DB:4C:81"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.yxrcr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 912\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=xkj17dav52wpl9gq21m06a495q9oro9; syncedCookie=true; oaidts=1763534926\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 06:48:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: e0778356fdf794421d8e32f86f76cb98\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\nexpires: Fri, 21 Nov 2025 06:48:47 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T19:28:29.736895Z","times_seen":114915,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}