{"report_id":"ac8b1c16-e7cc-4904-8056-a41dc5d04550","version":0,"status":"done","tags":[],"date":"2026-07-26T13:50:34Z","url":{"schema":"https","addr":"hiend888.icu/","fqdn":"hiend888.icu","domain":"hiend888.icu","tld":"icu"},"ip":{"addr":"118.139.178.218","port":0,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"hiend888.icu/","fqdn":"hiend888.icu","domain":"hiend888.icu","tld":"icu"},"title":"HIEND888 เว็บยอดนิยมอันดับ 1","dom":{"size":10824,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (456)","md5":"7b74459fe1f0fe6c331651f93e297f01","sha1":"f66500815777e544f773c4826654075b9d1643d7","sha256":"288fdef24946e49e096bc759e9b5913290317468e6cac2e0bcda4dce92b6c004","sha512":"77efd90a0747cbce860237b7bec9e2c32d0f9f91db5a0a765a2ae5e41343f51fd07f5c1bcd38444599533de99e2a120ccbd49603b8759ce04eafbd1f0c9a649f","ssdeep":"192:HpSY2gmwsrGaNKUwROWaOCwBW6bq1TAvORb2wBzK3aRpwmC2DVncARvaJSn/YpWT:HpNJm4ARwmC2DVncARvaJS/YFw","tlshash":"9b22d832a982412a7023c1826767736ef134d043e70395c8f7ae52b5cfd16d7aa5fe98","dom_hash":"domhash285329008e0b08e47282f567245b6f86","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hiend888.icu/","fqdn":"hiend888.icu","domain":"hiend888.icu","tld":"icu"},"ip":{"addr":"118.139.178.218","port":0,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-30T13:50:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"hiend888.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"img1.wsimg.com","ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2008-03-17","domain_rank":58983,"first_seen":"2012-06-20T14:42:31Z","last_seen":"2026-07-20T09:22:04.326187Z","alert_count":0,"request_count":2,"received_data":107447,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"hiend888.icu","ip":{"addr":"118.139.178.218","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"domain_registered":"2026-07-21","domain_rank":0,"first_seen":"2026-07-26T13:11:41.114718Z","last_seen":"2026-07-26T13:11:41.114718Z","alert_count":2,"request_count":2,"received_data":11369,"sent_data":1143,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"hiend-888.bet","ip":{"addr":"172.67.179.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-26T13:11:41.118589Z","last_seen":"2026-07-26T13:11:41.118589Z","alert_count":0,"request_count":2,"received_data":956972,"sent_data":1079,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":7,"received_data":123173,"sent_data":3859,"comment":"","tags":null,"fingerprints":null},{"fqdn":"csp.secureserver.net","ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1998-03-30","domain_rank":62352,"first_seen":"2022-12-18T21:17:09Z","last_seen":"2026-07-20T09:36:11.194311Z","alert_count":0,"request_count":2,"received_data":1017,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":1,"received_data":6736,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hiend888.icu/","fqdn":"hiend888.icu","domain":"hiend888.icu","tld":"icu"},"ip":{"addr":"118.139.178.218","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd059c539f7eb82843a7b7c20d4437cf","sha1":"3a3647ccf9cf3eaae763397c67a4e64940f83a91","sha256":"2bae96cd3b2554b5936a41ce44cf43445f4f798839e4cddc121948abb88edb4c","sha512":"6462ff011a109c8020822048181616731f53fa245349d97534f416d5c638f5b00286a1e2176e7dbdfeaf5525ed157485e37cd3a50557430913f8919cd0b9bfa3","ssdeep":"","tlshash":"12e0c00dd01a008212168c403211196fbf1ac2f2c3492c9ec714897a66cf01bf7af580","size":363,"data":"","first_seen":"2026-07-26T13:02:35.408646Z","last_seen":"2026-07-26T13:56:47.280732Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/traffic-assets/js/tccl.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a37dab530d4cba8ef9134c279c20612","sha1":"ef687d672e515d41f8b9c6b23e8c66b117a609c3","sha256":"5c16c1b3a290dd98b67c97387769f0ba4ce1a68fc5a584f603d85eec8ecfa499","sha512":"f08cbc1d2bea4b6bef0f153e83a74edfe4abf9c6f39aaadb35a6c167efd6f667b151b7154ab6e444b75420335488d27d3a33ec6e6e2c3d953a41d0a03ce563f9","ssdeep":"1536:uzSGNmZEfRDJYW/3TV4vlJHjaBaR02YX25x6JR:kD6W/WFu","tlshash":"67a3a688f6a1f07142e76165412f010bf379a965b0aed0d4e725e8f8adf85ce8173f29","size":106502,"data":"","first_seen":"2026-05-27T17:58:47.761284Z","last_seen":"2026-07-27T01:59:48.239937Z","times_seen":17318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hiend888.icu/","fqdn":"hiend888.icu","domain":"hiend888.icu","tld":"icu"},"ip":{"addr":"118.139.178.218","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-26T13:50:05.986Z","timestamp":1785073805986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.hiend888.icu","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 12:44:13 GMT","end":"Mon, 19 Oct 2026 12:44:12 GMT"},"fingerprint":{"sha1":"A7:05:B3:3D:5A:5F:6F:3E:76:E9:F8:F9:28:DA:14:9B:61:09:5B:78","sha256":"17:8C:2E:10:41:A8:BB:49:D8:3D:71:8E:54:DC:D2:B8:9A:61:EE:01:68:27:40:6F:69:F5:C7:60:11:EB:96:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hiend888.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 21 Jul 2026 13:45:10 GMT\r\netag: \"36001df-28d8-6571f3b4331bb-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3894\r\ncontent-type: text/html\r\ndate: Sun, 26 Jul 2026 13:50:06 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10912,"size_decoded":4185,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (463)","md5":"c90a5ef4a13b8e1df35770dc339dc174","sha1":"24b35aa54a4cfb95d24d4bdaed9e4c1c4b820b54","sha256":"e93f16ed870a8c7f6cb329e047e3a0e2960029ff04925f26ef5cd44527316979","sha512":"1cdf9e5982c265f9ef116fd3370bfa65297152e784470d467e8b67647fb7041f489f82a34dad14a08cc5397d22a4c810ec9d738850f217046b228580429d397f","ssdeep":"192:zp4Y2SmwsrGaNKUwROWaOCwBW6bq1TAvORb2wBz43aRpOmC/aVHBARvaJSn/YmWA:zpzrm4AnOmC/aVHBARvaJS/Y2F","tlshash":"9322e8329982412a7023c1826762736eb134d043e70399c8f79e62b5cfd16d7ea5fe98","first_seen":"2026-07-26T13:11:45.868185Z","last_seen":"2026-07-26T13:50:35.747767Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":5,"connect":257,"send":0,"wait":267,"receive":0,"ssl":517},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"hiend888.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hiend-888.bet/images/logo.png?v1","fqdn":"hiend-888.bet","domain":"hiend-888.bet","tld":"bet"},"ip":{"addr":"172.67.179.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.539Z","timestamp":1785073807539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiend-888.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 04:31:50 GMT","end":"Mon, 21 Sep 2026 04:31:49 GMT"},"fingerprint":{"sha1":"6C:1C:12:FD:9E:B7:99:C2:7A:10:7B:07:5F:68:06:9E:E9:92:FE:A3","sha256":"06:68:B5:D6:75:1A:45:CD:04:E4:2E:8D:88:32:5D:8E:14:08:88:CA:19:7B:53:21:84:99:B2:84:8A:06:ED:51"}}},"request":{"raw":"GET /images/logo.png?v1 HTTP/1.1\r\nHost: hiend-888.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hiend888.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 13:50:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 228479\r\nserver: cloudflare\r\nlast-modified: Wed, 28 Aug 2024 03:51:55 GMT\r\netag: \"66ce9edb-37c7f\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 2335\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Frsyc9NXEfJ3XnFo32r9Qb9RH8IFZFQdG5THDvEmii88TjgJ25lBTmfbmgoNkd61vRB%2FSRkvATwOjeWgvYGmswo4N6pN8SNzZ3Fzgifc9doYy4zLuvqhbzATOd8YVVhH\"}]}\r\ncf-ray: a213df219d07b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":228479,"size_decoded":229174,"mime_type":"image/png","magic":"PNG image data, 940 x 340, 8-bit/color RGBA, non-interlaced","md5":"b61dabdda628c450eebd720d34ebcb44","sha1":"fbd4ecdb766b395790ee6a2cff612446c87c51eb","sha256":"93024f0e08b974d31f88dec050286775f973f869dba2981eba823ca82bff753f","sha512":"0ce9e7c83b1f49f3733cd67f89f4d8ac700c61c5305fcd5a19a3dc8fbc8ea195f37c1c700fe89193aadc5eed3b23c689d8de169a7f358fb19eda6469dc9db1dd","ssdeep":"6144:nEgG1U++FGz+vi8bv3kpnYg1LnbeJqeNMvVh:6Gi8bvUpnh1Lbeseah","tlshash":"222423c708a255c67c9558ba7bb0713c9e8b9d41dace0895ef54f0eea335e1ca53f0a0","first_seen":"2026-07-26T13:11:45.869057Z","last_seen":"2026-07-26T13:50:35.749006Z","times_seen":6,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":71,"dns":0,"connect":1,"send":0,"wait":14,"receive":4,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr5KPxWzVaF5NQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.689Z","timestamp":1785073807689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr5KPxWzVaF5NQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hiend888.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13784\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 14:35:30 GMT\r\nexpires: Fri, 23 Jul 2027 14:35:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 256477\r\nlast-modified: Wed, 10 Sep 2025 16:43:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13784,"size_decoded":14597,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13784, version 1.0","md5":"14f1963c9f4e44b48dd3aa287ae0e07a","sha1":"c9086cd45cb25020c82c874d7a72a2c4463d1289","sha256":"ac40cf0d115bc06bdde46dcb264db6ea887d6eefe36f7f8286f3342f1facf078","sha512":"be20d8dbf89599d857543da2b8c6bb3f6fa97589ef3df1e760819337b53ea2df093d40eb13f7681203280247e58955d7e2582dc93d120bb5ec63191d0f45a0e6","ssdeep":"384:thbYwTsfc3ecRU7xHQqy8PXBbaovjOpTQ:XY997xH17ZbBvye","tlshash":"4952c0d849a547a6e61b82f1d54cefc23675030ce499049857f26bfd8850b6eacf2273","first_seen":"2025-05-04T12:45:31.736924Z","last_seen":"2026-07-26T13:56:47.279757Z","times_seen":658,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr4uPhWnVaE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.690Z","timestamp":1785073807690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr4uPhWnVaE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hiend888.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19276\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:11:35 GMT\r\nexpires: Thu, 22 Jul 2027 13:11:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:40:10 GMT\r\ncontent-type: font/woff2\r\nage: 347912\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":19276,"size_decoded":20089,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19276, version 1.0","md5":"31da10f2e745d03f329cfc87d45d6c3a","sha1":"49d517f3f800e04eb6dfd7948f808947343ac057","sha256":"a44817a3dcd26f5c659cd92c241f7c9e96414a74c0de249407064364573cd6b5","sha512":"ab7a86d73da8bf083eca72c1c2bd1ded7661339aa64b692194244bddfbaaa6720b24535005ba8a43d1cd21391916854fd85921763baa423b1128bb9cf3ec22cb","ssdeep":"384:pkLL43v8zfymKhBeCuoBwkA5uldAr2mQGEWweZvhcg2PdH/U6:OLU3v8zfyjhBIaldAHrczFH/U6","tlshash":"8282e01eeb1fc5a8fd0083ebca07839c77765810d1b27d976daf80d4ea8d1e5122118b","first_seen":"2025-05-04T15:41:45.605838Z","last_seen":"2026-07-26T13:56:47.275929Z","times_seen":3381,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":41,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiend-888.bet/images/bg.png","fqdn":"hiend-888.bet","domain":"hiend-888.bet","tld":"bet"},"ip":{"addr":"172.67.179.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.699Z","timestamp":1785073807699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiend-888.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 04:31:50 GMT","end":"Mon, 21 Sep 2026 04:31:49 GMT"},"fingerprint":{"sha1":"6C:1C:12:FD:9E:B7:99:C2:7A:10:7B:07:5F:68:06:9E:E9:92:FE:A3","sha256":"06:68:B5:D6:75:1A:45:CD:04:E4:2E:8D:88:32:5D:8E:14:08:88:CA:19:7B:53:21:84:99:B2:84:8A:06:ED:51"}}},"request":{"raw":"GET /images/bg.png HTTP/1.1\r\nHost: hiend-888.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hiend888.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 13:50:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Mar 2023 06:29:26 GMT\r\netag: \"641aa046-b1821\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nage: 2335\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jNMAPQnSfuc2n2zxi%2F15kXXCkf8755BGZ7QieJ9GYCm9hgLkmszYjby3%2FGgz07LkRxHIuvF33r0uvf%2Fs1aw6f%2BoxCkH7CLdkUt%2BVDrExTbXCfd6Thui7S8N0AYydRd5%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a213df223fa05688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 727073\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":727073,"size_decoded":727798,"mime_type":"image/png","magic":"PNG image data, 376 x 2394, 8-bit/color RGBA, non-interlaced","md5":"4ac06f05076151215e39742c16b17885","sha1":"86eb7d047db8f5eda4b5919f1ced9e0ea7165405","sha256":"a5f80fbc22ca7965550ac5cd863acda8dc91d53b979f07548639a1295bbf3229","sha512":"b6a9e32751222bc602bc1421d9db98efe04dd6ebd2d436d4a952d52b9997f342ff90dd522b742b8b4fa3fdd8ec4cd58bdcb9fb165004e0f573826ba34335bdf8","ssdeep":"12288:c+eqB8a89kc8RUfO1u1d59Dr6TAeSSj/fjKjfX75Enu571cH/Dg20Bb43yE9fO4l:tB8dUu31dr6TrSSjiD57eszbx2f9","tlshash":"36f423d17e8c68f90c9feb44453133a56b4a8b0820fdf10b7de6c9576bac9a18a4f447","first_seen":"2026-07-26T13:11:45.863909Z","last_seen":"2026-07-26T13:50:35.750894Z","times_seen":6,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":15,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiend888.icu/favicon.ico","fqdn":"hiend888.icu","domain":"hiend888.icu","tld":"icu"},"ip":{"addr":"118.139.178.218","port":443,"asn":26496,"as":"AS-26496-GO-DADDY-COM-LLC","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.836Z","timestamp":1785073807836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.hiend888.icu","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 12:44:13 GMT","end":"Mon, 19 Oct 2026 12:44:12 GMT"},"fingerprint":{"sha1":"A7:05:B3:3D:5A:5F:6F:3E:76:E9:F8:F9:28:DA:14:9B:61:09:5B:78","sha256":"17:8C:2E:10:41:A8:BB:49:D8:3D:71:8E:54:DC:D2:B8:9A:61:EE:01:68:27:40:6F:69:F5:C7:60:11:EB:96:0E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hiend888.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hiend888.icu/\r\nCookie: _tccl_visitor=9b285823-519b-4b83-bca6-7e32f511987e; _tccl_visit=9b285823-519b-4b83-bca6-7e32f511987e; _scc_session=pc=1\u0026C_TOUCH=2026-07-26T13:50:07.705Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 13\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sun, 26 Jul 2026 13:50:07 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13,"size_decoded":166,"mime_type":"text/html; charset=iso-8859-1","magic":"ASCII text, with no line terminators","md5":"1e6cd917ed71a1241e4bedc29264bd98","sha1":"5b65037351caeb0e5a48d963d7ffa88d0271d546","sha256":"7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402","sha512":"90e7e9f406dbb9a55b45643d6b4afce103cd565b33e40397b8422e3347ad3778220f8d1ae7befe66db61ce796d3e22d24cbef5fd3ecbbcb5f89a852d19f47e99","ssdeep":"","tlshash":"eb60000c0003c3cc0000003033c00003c000030c303300330000c000000c03c00c00cc","first_seen":"2023-03-08T15:13:39Z","last_seen":"2026-07-26T22:53:00.49889Z","times_seen":16326,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"hiend888.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr4uPhWzVaF5NQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.696Z","timestamp":1785073807696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr4uPhWzVaF5NQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hiend888.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 06:07:31 GMT\r\nexpires: Fri, 23 Jul 2027 06:07:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286956\r\nlast-modified: Wed, 10 Sep 2025 16:40:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13488,"size_decoded":14301,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13488, version 1.0","md5":"7e282092619e83527baf07b5de0a1753","sha1":"fb8d514d7275260715385d88a3d327a128610a74","sha256":"20ee1ffc0cbccfc9e4b7d660d2937f82b75d0eb41354e71e22752495aa51f68a","sha512":"fbdb6d402588ec80a8b32cb41899b3d81c265a5cbb0a4c1d9cc227bac95c917656919f225627720d583ffeb6c49dee4d8abc985bde4824779658955978fe84d0","ssdeep":"192:fGhuoiIthoFe3yjqs+WWI8N0n/efbCbATIyS0714d1iRmoVCUBYF7iQEoKmsXdEL:fzopho0gBWJNEATSFiCUBK7i/oINnbW","tlshash":"7752d044932be8b1ca1b09bfa4e29e1ae7412c2e60fb489554709127d5fcbf4c6533e1","first_seen":"2025-05-04T15:41:45.710779Z","last_seen":"2026-07-26T13:56:47.27689Z","times_seen":621,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:08.090Z","timestamp":1785073808090,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3 HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://hiend888.icu/\r\nContent-Length: 1047\r\nOrigin: https://hiend888.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1047,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"e8c2ecc126d14aef9fd45f72abaca73c\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.2\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"e8c2ecc126d14aef9fd45f72abaca73c\",\"host\":\"hiend888.icu\",\"path\":\"/\",\"location\":\"https://hiend888.icu/\",\"referrer\":\"\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"9b285823-519b-4b83-bca6-7e32f511987e\",\"sessionId\":\"9b285823-519b-4b83-bca6-7e32f511987e\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/data-platform/signals/page-view/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-07-26T13:50:07.705Z\",\"forensics\":{\"traceIdAdopted\":false},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"cpsh-oh\",\"server\":\"sg2plzcpnl509382\",\"dcenter\":\"sg2\",\"cp_id\":\"10989031\",\"cp_cl\":\"8\"},\"customProperties\":{}},\"producerEventId\":\"ddbb654a-e37a-4fd6-9aee-ed4636584ee3\"}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 236157585049843460015955691130209766178\r\nx-envoy-upstream-service-time: 107\r\nx-error-info: 0\r\nx-request-id: edb8bd8f-3f31-4731-908f-1b15a80f5168\r\nExpires: Sun, 26 Jul 2026 13:50:08 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sun, 26 Jul 2026 13:50:08 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":509,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-07-27T01:49:54.170282Z","times_seen":750556,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":225,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:08.092Z","timestamp":1785073808092,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://hiend888.icu/\r\nContent-Length: 1830\r\nOrigin: https://hiend888.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1830,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"e8c2ecc126d14aef9fd45f72abaca73c\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.2\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"e8c2ecc126d14aef9fd45f72abaca73c\",\"host\":\"hiend888.icu\",\"path\":\"/\",\"location\":\"https://hiend888.icu/\",\"referrer\":\"\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"9b285823-519b-4b83-bca6-7e32f511987e\",\"sessionId\":\"9b285823-519b-4b83-bca6-7e32f511987e\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/rigor/page-navigation/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-07-26T13:50:07.839Z\",\"navigationType\":\"navigate\",\"timing\":{\"navigation\":{\"connectEnd\":1785073806768,\"connectStart\":1785073805994,\"domComplete\":1785073807836,\"domContentLoadedEventEnd\":1785073807711,\"domContentLoadedEventStart\":1785073807706,\"domInteractive\":1785073807705,\"domLoading\":1785073807160,\"domainLookupEnd\":1785073805994,\"domainLookupStart\":1785073805990,\"fetchStart\":1785073805972,\"navigationStart\":1785073805971,\"requestStart\":1785073806769,\"responseEnd\":1785073807035,\"responseStart\":1785073807035,\"loadEventStart\":1785073807836,\"loadEventEnd\":0,\"pageLoadTime\":1865,\"domContentLoadedTime\":1735,\"domInteractiveTime\":1734,\"domainLookupTime\":4,\"serverResponseTime\":266,\"serverConnectionTime\":774,\"redirectionTime\":1},\"paint\":{\"largestContentfulPaint\":1720}},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"cpsh-oh\",\"server\":\"sg2plzcpnl509382\",\"dcenter\":\"sg2\",\"cp_id\":\"10989031\",\"cp_cl\":\"8\"}},\"producerEventId\":\"588283ea-aac2-495d-9f06-fc3a09746d23\",\"contentLoadType\":\"hard\",\"response\":{\"transferSize\":4194,\"encodedBodySize\":3894,\"decodedBodySize\":10912}}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 283844555613798258876102002178828857279\r\nx-envoy-upstream-service-time: 91\r\nx-error-info: 0\r\nx-request-id: 33e9fef2-42af-46c8-9832-0745bd1f24b0\r\nExpires: Sun, 26 Jul 2026 13:50:08 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sun, 26 Jul 2026 13:50:08 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":508,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-07-27T01:49:54.170282Z","times_seen":750556,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":288,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Kanit:wght@300;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.531Z","timestamp":1785073807531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Kanit:wght@300;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hiend888.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Jul 2026 13:50:07 GMT\r\ndate: Sun, 26 Jul 2026 13:50:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6052,"size_decoded":1268,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e34e3b11bb435848b3eaa375f7020c69","sha1":"4825dfa9599d28521edef8452b793fe95bc5b8f1","sha256":"3aa344e03e7bfb436df1e2ca4ceca7e9a9da36e30658b5dff0d7bbb39040bbd0","sha512":"2d8a4abba4e1d42bb3b783d9afa4a832458890382becbf4402d84247723c865c753d62d2ee364eea25ccc08d379438b76f13141fe314534dde8cdbce832991be","ssdeep":"96:CO1auNoO1aXjO1acJc+u0O1aaNTOXa/NoOXaIjOXaYAJc+u0OXa5NTOxMaMNoOx2:oKO5o1c1A8Y0Pis5M+ycdKunhI","tlshash":"c8c10e956417d540eb972cc223cf7e2a9e5e61207451ea7a6ffe08c8acabd31131570d","first_seen":"2026-07-26T13:02:35.38777Z","last_seen":"2026-07-26T13:56:47.271003Z","times_seen":13,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/traffic-assets/js/tccl.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.533Z","timestamp":1785073807533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /traffic-assets/js/tccl.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hiend888.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ncontent-length: 0\r\nlocation: https://img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js\r\ncache-control: max-age=31536000\r\nexpires: Mon, 26 Jul 2027 13:50:07 GMT\r\ndate: Sun, 26 Jul 2026 13:50:07 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T01:51:03.161607Z","times_seen":17553488,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":9,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.606Z","timestamp":1785073807606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hiend888.icu/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: YIy0Vb7PsKceT/8Z6VS+0oKYZ5GTFBIWSs5UPpghGTbSTiKmkumqbtEsbkF4xkbXTnQwpRLm5no=\r\nx-amz-request-id: GTHV8R2A87XY4J95\r\nlast-modified: Wed, 27 May 2026 17:27:10 GMT\r\netag: \"8a37dab530d4cba8ef9134c279c20612\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version: 1.3.2\r\nx-amz-version-id: V1QpCm1bxgHgw4G1nDhX4YJuFGsOtoK3\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=1800\r\nexpires: Sun, 26 Jul 2026 14:20:07 GMT\r\ndate: Sun, 26 Jul 2026 13:50:07 GMT\r\ncontent-length: 21664\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":106502,"size_decoded":22315,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8a37dab530d4cba8ef9134c279c20612","sha1":"ef687d672e515d41f8b9c6b23e8c66b117a609c3","sha256":"5c16c1b3a290dd98b67c97387769f0ba4ce1a68fc5a584f603d85eec8ecfa499","sha512":"f08cbc1d2bea4b6bef0f153e83a74edfe4abf9c6f39aaadb35a6c167efd6f667b151b7154ab6e444b75420335488d27d3a33ec6e6e2c3d953a41d0a03ce563f9","ssdeep":"1536:uzSGNmZEfRDJYW/3TV4vlJHjaBaR02YX25x6JR:kD6W/WFu","tlshash":"67a3a688f6a1f07142e76165412f010bf379a965b0aed0d4e725e8f8adf85ce8173f29","first_seen":"2026-05-27T17:58:47.761284Z","last_seen":"2026-07-27T01:59:48.239937Z","times_seen":17318,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr5mOBWnVaE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.686Z","timestamp":1785073807686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr5mOBWnVaE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hiend888.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:43 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:39:52 GMT\r\ncontent-type: font/woff2\r\nage: 347964\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":19236,"size_decoded":20049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19236, version 1.0","md5":"12c6e4c44681180d8bcfd68b7b7b1258","sha1":"7f16e28ecf3a9e4d8454fb1010b60af5ba835582","sha256":"c6c4695e70f2b11892dfaec4d4ab44065ed3a847f4d531cfc1340d2e65a738c9","sha512":"2d314ef767721d9d56ce01b016803b02912eb0b5c0c87b0da5dd15a8de431b6b69abfe04cd71fa57881fd10e300f8ddc96ee82292d54fd19b9161361ec96641a","ssdeep":"384:mMLVaCCwmhi5dxGVfDxuaYdaN3Y4pheX9cWjpmHSEG:9VaCYhibkV7xrOaNrbWjQS7","tlshash":"f582e0a05e8b67c9e827dde31228ccda374a08e78eb6c1c06fd5651269784351ec3b0f","first_seen":"2025-04-28T13:50:35.994991Z","last_seen":"2026-07-26T13:56:47.278816Z","times_seen":4487,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":25,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr5KPxWnVaE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.687Z","timestamp":1785073807687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr5KPxWnVaE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hiend888.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19496\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Jul 2026 11:44:35 GMT\r\nexpires: Mon, 26 Jul 2027 11:44:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 7532\r\nlast-modified: Wed, 10 Sep 2025 16:43:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":19496,"size_decoded":20307,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19496, version 1.0","md5":"201d1d24b464e41d18e57dc58687f055","sha1":"d35fdb2a75da697dc080ced73400fc394f6cf4b8","sha256":"c3c4f89f25c7c8343a8b8ce0a120fe2c419809a1e92cc9313cbb5a36fb10a411","sha512":"8c695fb5dd450e0d4355f898d657d6d5c943c5c049284c9b32c017fc89d82296dd84b93abe8ed5ab8c44a2a480515d37e12b1dc3c8f2532406108d849533e93e","ssdeep":"384:IKA0aP4lPNAX1S8i6ePT1EEgJM3tgs4+fWjg+lva3AXnpj9gx:IRyWJeeJwgsLf0vg0XI","tlshash":"fd92d18fed917bc8f29d04ae94830ffd6877b10bd1a081790ad464419ca87766a6dc47","first_seen":"2025-04-24T11:01:06.88202Z","last_seen":"2026-07-26T16:11:15.435517Z","times_seen":3487,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":50,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr4-ORWnVaE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.691Z","timestamp":1785073807691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr4-ORWnVaE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hiend888.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19048\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:13:22 GMT\r\nexpires: Thu, 22 Jul 2027 13:13:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:41:05 GMT\r\ncontent-type: font/woff2\r\nage: 347805\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":19048,"size_decoded":19861,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19048, version 1.0","md5":"f659d8a8cf768c813fc04d8ea1123a8b","sha1":"5f19fc05a44000a1e82710485b32220020a8290a","sha256":"a29db52c836726b49317c0861d922e195a3d827d07a935701cdfe1f26425f64a","sha512":"4afea3d4b8e151055fe2a47c4aced2300abaae1f39350d6c0cd68140a5ff79888b9d6518f3228e4d98c5d1cf0494c2b1b670e347fddf6e0f6af388bd834f21d5","ssdeep":"384:E+obVK1NX8ka1qoFV71+QBHNvVt7YAR9PpVEg4GYXSNvr4W:EJA1NX8ka17z1NHNvVtFRjH4GYXSNz4W","tlshash":"3182d133da8e4320e681f8a50d17dd87d7b985dcaabc9e08275e828ac6d7426094eb41","first_seen":"2025-04-24T15:54:07.283751Z","last_seen":"2026-07-26T13:56:47.277837Z","times_seen":1702,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":34,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kanit/v17/nKKU-Go6G5tXcr4-ORWzVaF5NQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hiend888.icu/","date":"2026-07-26T13:50:07.694Z","timestamp":1785073807694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/kanit/v17/nKKU-Go6G5tXcr4-ORWzVaF5NQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hiend888.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 18:04:51 GMT\r\nexpires: Mon, 19 Jul 2027 18:04:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 589516\r\nlast-modified: Wed, 10 Sep 2025 16:40:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13156,"size_decoded":13969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13156, version 1.0","md5":"c07742e521297bde26c5185952cfc0f6","sha1":"f5a7b42db16291d5e84760cccf298dc3b01218fd","sha256":"20aee722979a0f91b2baac3d0590a512b02fe00f80c454c07a178cc3964f33c2","sha512":"27115b90735d395e4ee2af3221f5f15e6eba5f512e6bd2f07af5c5ba295238955dbc1caddd94531fafe10efda544ffcfda25b39ba4711c2f3b03e2ca77a3e4a5","ssdeep":"384:yulblHE3XJNUEIVKXCUFB66QaAdI5O7AXVTSIb:yulblk3XYABjfmm8Alr","tlshash":"1d42bf86f524e429ed002db07e2ca29d1646aa8875dab0ed31372e9fe1ab0117459cb1","first_seen":"2025-04-26T12:39:08.73898Z","last_seen":"2026-07-26T13:56:47.263239Z","times_seen":610,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}