{"report_id":"af25b704-9b9c-4d19-9309-5798b314a03f","version":0,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-08-31T18:47:03Z","url":{"schema":"http","addr":"flatsome.hsdtit.com/id-review-page/login","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"ip":{"addr":"103.200.23.159","port":0,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"final":{"url":{"schema":"https","addr":"flatsome.hsdtit.com/id-review-page/login/","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"title":"Facebook","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T21:32:45.330539Z","times_seen":18207950,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"flatsome.hsdtit.com/id-review-page/login","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"ip":{"addr":"103.200.23.159","port":0,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T18:47:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"flatsome.hsdtit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"flatsome.hsdtit.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"static.xx.fbcdn.net","ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"domain_registered":"2007-05-03","domain_rank":4147,"first_seen":"2012-12-01T13:12:13Z","last_seen":"2026-08-31T16:15:54.688433Z","alert_count":0,"request_count":13,"received_data":4899355,"sent_data":7774,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flatsome.hsdtit.com","ip":{"addr":"103.200.23.159","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"domain_registered":"2025-07-21","domain_rank":0,"first_seen":"2026-06-30T06:24:05.416057Z","last_seen":"2026-08-31T18:42:18.651838Z","alert_count":27,"request_count":9,"received_data":2463510,"sent_data":5024,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WooCommerce:10.6.0","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"eu.api.fpjs.io","ip":{"addr":"75.2.52.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-03-08","domain_rank":1610906,"first_seen":"2019-05-16T17:17:39Z","last_seen":"2026-08-16T13:40:47.898139Z","alert_count":0,"request_count":2,"received_data":1800,"sent_data":1083,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fpjscdn.net","ip":{"addr":"162.159.141.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-14","domain_rank":71894,"first_seen":"2022-11-09T16:03:56Z","last_seen":"2026-08-19T14:25:56.171292Z","alert_count":0,"request_count":1,"received_data":194570,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"data","addr":"data:text/javascript;base64,cmVxdWlyZUxhenkoWyJTZXJ2ZXJKU1BheWxvYWRMaXN0ZW5lciJdLGZ1bmN0aW9uKG0pe20ucHJvY2VzcygpO30sbnVsbCwweDEwMCk=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8ac9c2cf83ac8f99a24d7f3d69b538f","sha1":"c9d59c0a74d6f66838e8b147f58a3797a9ee5be9","sha256":"5c37b7510fac99790bc53529a8552a04f730ea16c7c2ed36c3d36282d8a46da8","sha512":"0efdce043d82c555aa9f6c33060f3a0443e2ae9ac2a909e2c3f9ebcfa2547863b044dce4f98a2d353aa3c933ce04424faa56348bf4bd3a74fda0091eb341bdf3","ssdeep":"","tlshash":"eba022000e083ae00b80f0e038cbe0080eaae8833f8030200a0880ae8cf0c822fa0b0c","size":77,"data":"","first_seen":"2025-04-30T09:03:04.161526Z","last_seen":"2026-08-31T21:34:20.709232Z","times_seen":44558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iU7G4/yy/l/de_DE-j/Mu5rQDdK1U2.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c992fd0bd6a539ab11e876a293b5a4f","sha1":"2c0b06c0f652f58affbf966014c1ebf60e40a5fb","sha256":"5c4c7f258a3661bba79b42c7019a77b730edbebe1b6da4dbca94a60dab443db6","sha512":"448b095ba538e20815e3c37f9e4bde7c4de3a373e1986d29294f149c39203c77ea0ec95348ff0769fffca7b3f86675e809769c360143697a063146f9d694ff09","ssdeep":"3072:cozkSv90qSYYwcwogpj0/pLMHswYLzNkebZeH:cc9Hht4pLMrYLS","tlshash":"d9041bcdb495385609b71469d0af2b4bb77d38c7240dc568e2b5df822a28e8f5237b1c","size":184066,"data":"","first_seen":"2026-05-20T11:36:03.117913Z","last_seen":"2026-08-31T18:47:19.032364Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iffg4/yD/l/de_DE-j/IGMQB7wzsGt.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e00e150e3fc79d483899bee312f3f9c","sha1":"137565b5d73f6baca684e86400d200f7d7dd483e","sha256":"f53759d888a72a9b980340535cd532ffd002193aa0c71f807fc9f3ca850aa97f","sha512":"b6001c8ea4d6383cbde62b85291d087096dd7cc1d3a69b2e3ef9e2c132410eadf4b577fae62bc16edf6725ef6462872a817d9925f9beb3380dd546c9b948acd8","ssdeep":"1536:a8kfoxcIzYf8QyydoDkOW64R4NuOpljqWOdIUbg7WAFYK0DuuAIMNlDhTuORqR+P:6pKMWAIUbg7WAFYK0D/AI4XqlC","tlshash":"b064dbaf9d42251f2016b52662b7558993ada80de34e5ed3f2c0d420db6cad80273fdf","size":313000,"data":"","first_seen":"2026-06-19T01:45:37.595817Z","last_seen":"2026-08-31T18:47:19.056278Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flatsome.hsdtit.com/id-review-page/login/","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"ip":{"addr":"103.200.23.159","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"484f46c41e1d426e7a6c0ef7b0901313","sha1":"b29c0732d84ffbbf222decb6598311bb322fcf69","sha256":"438dad4b0ea43b34820734d1c3adaa7e736882a17564b6d94b665f6a525dbc1b","sha512":"6d8cb9e75ce0c3fbdec9e644d595833ba4b44cd2219a0c5edcacf1265532f4b566d99c02807cd0eb37ade60013071571d7d64f5b0d9571225245ba38782f2fbc","ssdeep":"","tlshash":"64e0c0fb080f04d61f0d1078ab06d2c70072850e5895e614b99fd3158703365d082ae4","size":361,"data":"","first_seen":"2026-06-23T13:48:18.226692Z","last_seen":"2026-08-31T18:47:19.065389Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iZBp4/yP/l/de_DE-j/aTvLpEMiMqYV15tj8h63LNLwCYbyWCy8lRtKQGwG0ihEa-9ML_Y_MRXPtSESTGmzj1SR_169Kn2AO-Qx8lcabVTDOwgx-s7CoHnI3XLoYQF64vO2zT06LS1itQWShO2h-PYdZEoStQUE_H7OQEKEXaGJ8DTvtL32s_6TN5GUvR7zmf91bYZLjz85TBvoXroJ7K59X9C3AwQd1t3qNKef6G-hKocd89O_LiCUWDnXRwDHCkV8R1onn-JtdZ7PJrsOfCedTPWK80sYO5qoQ8aCFM-z_0Q2ncNh9-DZBIN8jKeHWrECl3_n5Wu6jBGHRQaSS1OrajkDar.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7626584c69cd82c1ae3596bb568d75a4","sha1":"60a8769c1d51388c594ac23890d1ae6088792c11","sha256":"a28073f86c24c3ac82a1ef40ce55153cd453520a7b87a07ec1aa8e232216cf43","sha512":"3cbc6290b7f895ea7ab662572bceb7cf40e505cc413d25a9dea8daffa6c6326262c2bd92dae273b1f65a3600741b97647dec421d90289e1f70c56f0a31b8d7f1","ssdeep":"384:xZk7HUHKnpv+JqwCZFA67elh4KEdvdp7yg88vvyBvMzBKPxLBo+ODBFyDcLxewHF:cnpv+BIFA66yygZXdMQDBEYLxB","tlshash":"e4f21bccb98d38a52dbb359ae03b0acf763c18655419cca495b3e98de1208ef607357d","size":37619,"data":"","first_seen":"2026-08-31T18:47:19.031361Z","last_seen":"2026-08-31T18:47:19.031361Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iNKB4/yS/l/de_DE-j/n5HPHhoxPjLrILaDcYemfd8-vDcYZmpIWG85hYJNt_ZS3YY4zTnUpHIhaobx6XpizDrruBGGEYFdGLxuD_lF_NqSUK4RKPjrQX9t5FIdnQ_ONHAdF4Q4yS3Q5OzTGu4i-_dLyLIhLjdtTF5MEOBgRSjooZ9V3TtN2HhP51QCeCZRMWgwI6-NhAsCA5Lc4eukwB7Pc8xvyfVWAYRn5Q5XLynIoHzskHM2TrHr72z775NzKCi2Sch9boWyHYdnzATCB6ghfjDQ.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"db580e0ddae73281d7ce3ef552d936da","sha1":"fb501ce2864fe633ab408b21bdda5989be939068","sha256":"08afb611c24d4986e130715578deb785ed7d50690641e2a988680efbfaeeecf9","sha512":"3ac6ddbe949de5dada13a2533984be68942b7c2aa29bee31cb04ff18297bb7d4e169d8b9eca0dc0d35d42cfe343c2b9034d12256271829365630b4c40e586cd8","ssdeep":"3072:862ACG4hqKHwqpeTFX25j+GCEQbCo60buhqWPLwHewsXecXnObvCxCBvlPEIw39R:8WCaqsTFXSj+GJbNiwtHU+","tlshash":"8a444bce34c5749447fb6ab8806f454bb3396865280cda64e666d8d1bc348de9333f2e","size":273331,"data":"","first_seen":"2026-05-20T11:36:03.119289Z","last_seen":"2026-08-31T18:47:19.023982Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yg/r/WiU7hFkhvzG.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a9eb1a1fb9a2a45cc5218550699f90f","sha1":"5d8d03a478b50e566595468d0d5c5e4da5b593d1","sha256":"f12a06990808f1d24207e299dcc5aea7bf417f12ff4aa47398b61ce889214583","sha512":"5ab0a72f7a4804984572c00d5a88969f9a8b4a79ce909e4e1ab430dd86a7df37ad3665c6dcee6b870076165d009ada9bd04508e7460aaba55a48d82ee0e3f764","ssdeep":"3072:he54IT2LA31EjrxyoATIe1jAGmqRh3yp2mCpkzhx2:ieACjrxyoAT6Ghh3yp2mCkO","tlshash":"256409cdb6d5b42113f375b6807f920bf2396a56684d8164e5a8d8e16cb884e8333f3d","size":313657,"data":"","first_seen":"2026-05-09T06:01:36.232063Z","last_seen":"2026-08-31T18:47:19.038962Z","times_seen":431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yD/r/kzGXhN7-usT.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"87a1b6369c7377b97e44332a5dffbf05","sha1":"fddec433afbb0c1ffce5b085238f900005d378d9","sha256":"7390de8dc41aecc87d3771b48c4c181e151e0c3fc42b01a9f5a1c05c39fc615b","sha512":"b2cf1e8023a0d9b096fa8b0121c402ac4c1b7177b2e06ed8f844706a5c8d0824e8e065fa0a7cd5252d2c1a1a8ee6e7c15e885b4cdc16f1b032ea3cf9a1b360f4","ssdeep":"","tlshash":"361102587968ca3987d900eb7c7bf337f46870253905e461695dcfed3c84e0d0531a66","size":1017,"data":"","first_seen":"2025-12-06T00:00:24.63873Z","last_seen":"2026-08-31T21:34:20.714801Z","times_seen":14096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iDc84/y5/l/de_DE-j/KsE361B_lE5.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4128ea4d2bf55166608cf0e061e9dee","sha1":"c51357323db38fa5f426a43a28989bea5ce7224b","sha256":"9288361accc2dbdeaca3239810332d7789939a1eddd5c16dee170e21d0d3d2aa","sha512":"2272040104dd7cb6570ecaf523faef0d79decaa96ae27d2983afcc210e3c7c291d3cd30fd1c49bc01251d868cb5c5f07c88cec6350e92d0c7b332eda2a15f44a","ssdeep":"6144:QSi/iIT8ndB0rxAxFVPFe8lEkXCRQ6MD7iOuHXk+0OuHXk+w:CfxAxF7oQ6MD7O","tlshash":"e3a49e62f9c932685b2726f454fb6fc7332c003c995c4a91e0a2d47522c8ef617bb667","size":483141,"data":"","first_seen":"2026-08-31T18:47:19.051339Z","last_seen":"2026-08-31T18:47:19.051339Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iYeD4/yh/l/de_DE-j/W3DhP5IP7AS.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"437712eeabc155e936b6012560b7572d","sha1":"22d703f4c4c6dd49f9d63c8f435d5db9bcc04461","sha256":"85080d701c758df29089202c227efe0041413a14e63b2b358ce0dc96f880f8d5","sha512":"0d94c8db7da045e38eae6184ed820a2275740e4dcce86842c615f5939141f72a2570275eb0ed99e48995c2b660d2ede4cdb42a69eccf34c28190e1eb3d6df5e7","ssdeep":"6144:5O+3kTokC8buv9BMgG8hd/GdWh7HLNFeURoYYCW23tOu3U7qG8B2QDA8VY8Ym7jM:U9Qd/GdWNrGg9YLStMKVY8YmP3VQeVV4","tlshash":"31252a9df58870622bb720b780bf5247733d6886240ec0a4b9b1ddd56a689ce5233f7d","size":1012375,"data":"","first_seen":"2026-05-20T11:36:03.10676Z","last_seen":"2026-08-31T18:47:19.034507Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iNHs4/y7/l/de_DE-j/OjVH_yjCtmZvkTPK6PGAI0ep27YIXYeUE2zNLgVz54WoWJukooR-9NvRi7mWBMSxEcAv3wM14GGu4a7eSNpDNxgKVIPNHOqVL96YEovco6eoyu_uK3aPyME2r.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"49f3285f5a6ad7dc2571f327f34d7465","sha1":"f1b316ed90098f367dc2840bf22e372be23bfccc","sha256":"2c0ce42fb0c6cbab0439526f6c8a8f062725db065089e360a88a3e5d5ca5eb77","sha512":"980149187fab1f6f14a3cecbbc91aaf0afa7ca44c2d0ec835ed28c7ded9683a358a6c84867d8f499657acb9d762a2af63584d16448a150a339882bef598663d0","ssdeep":"3072:YVJWqwVr3BvyCj9h86XF/dp2naZPQYyjd1r4wKBBA8WrOELfSqbooOwrVMp29mir:YmFdp2aZmTPKBBAPrDnbvVMp29zr","tlshash":"e0844ce87c4474946bbb55ba90bf014b733d2859150dc9a0f1a2fde6b8a48ce1133ebd","size":401022,"data":"","first_seen":"2026-05-20T11:36:03.115368Z","last_seen":"2026-08-31T18:47:19.029244Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4irYu4/yC/l/de_DE-j/yqtZZIToN2-G_QJBNg2xzOUjLpTeG1m3T.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c6c19600f4f0239a4b3faa4cc807894","sha1":"6503f196496cf8bf17b7f4b21ce9995a14275204","sha256":"91830f54bac65285f0703671c05e8af7187a1db064dfeed4b6e4944c06143ccf","sha512":"8efcc52634aab4d4a489fa48b6c08dfd335a821320c6ed39b271a59d6fbc9f0ec3e90c87bf1756bf8feccd6969add4b3de827dc12de943934a0f6d349a6bff27","ssdeep":"6144:iSEladdSInhBk5ykYcgBbhh6VXhIqpSVOJryoXXMSCEiMJpMa7MgMFWhA:izadk6hzkYciv6VXmq/VCDL","tlshash":"33056ddc789d74156eb715f690af0207733c240b280d8560f5a2feaa66b888e6137fdd","size":806288,"data":"","first_seen":"2026-05-20T11:36:03.11072Z","last_seen":"2026-08-31T18:47:19.028099Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iJVq4/yU/l/de_DE-j/L5g2L_ScOYG.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb1531cc9fb5e472da5dbe4e228cb856","sha1":"33c42e63ea62fcca4bad7514deef98c8872902a5","sha256":"a38013bb17de56a89079b7bd2d133ba38d0afb92c2ee2a6b6330cd8801ffcfd8","sha512":"78ca138ff034dcf1241e5142c454e2cb38008ed3b7a50b2af0dab15cad9a4a1a8ad1502bb0e0324ad051f1dbe75d54cbe333bd013e253b12f5f52ec93bbf1568","ssdeep":"1536:JZAiU9///JRUkCrsQJR8xCBBmb/3KNHT0PVcI:JZWTRV8R8xCTmT3KNHK","tlshash":"01d37d64ac492abd3d6f4efa816bd149726c4404f604ceb4f1d1feb99a488cc972371e","size":135006,"data":"","first_seen":"2026-05-20T11:36:03.11239Z","last_seen":"2026-08-31T18:47:19.040845Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iCqa4/yc/l/de_DE-j/I7zisu2TvZHc4-qegGtrnP1c4kEGeaT8_8Lit16ISbnHq67Jyk3OnED4j4SE1-LXf2fig5u4TEIHY1jsTWgm_fuv4a7Z0YNiNQSfoaUWLY9OQl_HJdYtTNCKNw1JtOGoHMq0HwsLVWymW36u4yAsukPWHDsVjQqltBeBhC8lbkhBm8OTh2otzgdunJl3g9q4pR78qLs-XSTXFxUbB69VqNNp4Gm1BHl-lElGzTH4Lah-t55E7mOl6Gkjq0OVeavkZc4HIHnCpIt4LvFvAsYJZCcc2ZP1Mq8wypiAW_bfkF94AKekI-DNAdmh5DEndjkC1LYw5WWi7I.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0565a0c9a09acbd9bbd7440c08523583","sha1":"ce5effa5334a3fbfc0555563ecd498a16cc4590a","sha256":"933aac863ea9a963c1619959f4f01aa595093210c74dfddd206aa1f4adf545d1","sha512":"91531716cdfa42356b1a67051a3b05218b2f3e92c6c452a3344f443cdc95a20e0580148f00f91c1f2721dfe40333b8eb94783ff5e3f734a11156e3e372c07a31","ssdeep":"6144:s6DjnuOBUoWV00HjAKRp20zxTj3Z6+MvOMRRnLexl8XBaP1hTsJu4yvqOToqC:NWV08EElZCLcgtAqOT+","tlshash":"7af44bce799534165ab720b690bf020bb37c2956380dc120f166fea6793d84e523bf6d","size":730403,"data":"","first_seen":"2026-05-20T11:36:03.122869Z","last_seen":"2026-08-31T18:47:19.033464Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fpjscdn.net/v4/jNhKjoC5tAGKbq5q9QPm","fqdn":"fpjscdn.net","domain":"fpjscdn.net","tld":"net"},"ip":{"addr":"162.159.141.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"451e60d7514c3ea5f46396816f0a019e","sha1":"3ee0c4a84be3cc73f0ea890df5a1e211e7d1ed9f","sha256":"65bf275eb1a24c196609abfe81cdc78df559f351ad5d53c468032526d8b63456","sha512":"7510350c0729da93d7f0bb3c270b39923d10b4f903942630ddfe55a2ad2d8f3560a1e9e30b9c1f46ea1fe5b9455c31d59ced4d52a9abc6219c701fafb4d4febe","ssdeep":"3072:bEQFQ7SbohDTvDbq9y8nni76mtR/6w+pbqokP:T67S6snnmtRSwpP","tlshash":"0714a3d8b2e6f2916372eca140bb040af67f3c96350c5984c1199ad53e3958bda37f1e","size":193930,"data":"","first_seen":"2026-08-31T18:47:19.04381Z","last_seen":"2026-08-31T18:47:19.04381Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"1788201979650.a6oG4INOiM96Z9SU8nMB70thYw","filename":"https://flatsome.hsdtit.com/id-review-page/login/","line_number":17,"column_number":29}]},"http":[{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iNKB4/yS/l/de_DE-j/n5HPHhoxPjLrILaDcYemfd8-vDcYZmpIWG85hYJNt_ZS3YY4zTnUpHIhaobx6XpizDrruBGGEYFdGLxuD_lF_NqSUK4RKPjrQX9t5FIdnQ_ONHAdF4Q4yS3Q5OzTGu4i-_dLyLIhLjdtTF5MEOBgRSjooZ9V3TtN2HhP51QCeCZRMWgwI6-NhAsCA5Lc4eukwB7Pc8xvyfVWAYRn5Q5XLynIoHzskHM2TrHr72z775NzKCi2Sch9boWyHYdnzATCB6ghfjDQ.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.066Z","timestamp":1788201975066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/v4iNKB4/yS/l/de_DE-j/n5HPHhoxPjLrILaDcYemfd8-vDcYZmpIWG85hYJNt_ZS3YY4zTnUpHIhaobx6XpizDrruBGGEYFdGLxuD_lF_NqSUK4RKPjrQX9t5FIdnQ_ONHAdF4Q4yS3Q5OzTGu4i-_dLyLIhLjdtTF5MEOBgRSjooZ9V3TtN2HhP51QCeCZRMWgwI6-NhAsCA5Lc4eukwB7Pc8xvyfVWAYRn5Q5XLynIoHzskHM2TrHr72z775NzKCi2Sch9boWyHYdnzATCB6ghfjDQ.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Tue, 31 Aug 2027 18:46:15 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: /PpIkqVy/9e4ipj0jBcfhw==\r\nx-fb-debug: Tub8eMPlc/Qjzo8FOyy6H17D7QtJ3rGLkg0Q6TSgqn4q7kYZzMhvCSz2qHda1FL8EzGHyJCmGE48jJpjL697HA==\r\ncontent-length: 72659\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=72, mss=1232, tbw=186137, tp=169, tpl=0, uplat=458, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":273331,"size_decoded":74654,"mime_type":"application/x-javascript; charset=utf-8","magic":"data","md5":"db580e0ddae73281d7ce3ef552d936da","sha1":"fb501ce2864fe633ab408b21bdda5989be939068","sha256":"08afb611c24d4986e130715578deb785ed7d50690641e2a988680efbfaeeecf9","sha512":"3ac6ddbe949de5dada13a2533984be68942b7c2aa29bee31cb04ff18297bb7d4e169d8b9eca0dc0d35d42cfe343c2b9034d12256271829365630b4c40e586cd8","ssdeep":"3072:862ACG4hqKHwqpeTFX25j+GCEQbCo60buhqWPLwHewsXecXnObvCxCBvlPEIw39R:8WCaqsTFXSj+GJbNiwtHU+","tlshash":"8a444bce34c5749447fb6ab8806f454bb3396865280cda64e666d8d1bc348de9333f2e","first_seen":"2026-05-20T11:36:03.119289Z","last_seen":"2026-08-31T18:47:19.023982Z","times_seen":10,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":481,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flatsome.hsdtit.com/rsrc.php/yl/r/9AJbVCy4-G1.woff2","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"ip":{"addr":"103.200.23.159","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:14.991Z","timestamp":1788201974991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.flatsome.hsdtit.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 08:07:35 GMT","end":"Sat, 10 Oct 2026 08:07:34 GMT"},"fingerprint":{"sha1":"95:00:4E:C0:78:D7:CB:EE:E0:1A:C5:F7:17:58:13:A9:B8:61:57:50","sha256":"B5:E8:10:B3:B8:C3:48:16:2E:AE:0C:4F:36:B1:FA:DF:BF:11:09:EA:A0:28:21:FB:FE:14:6F:91:15:9F:F2:0F"}}},"request":{"raw":"GET /rsrc.php/yl/r/9AJbVCy4-G1.woff2 HTTP/1.1\r\nHost: flatsome.hsdtit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/id-review-page/login/css/rkR9nETCCfCEkX3WI8UJzenJ_BbYUv0YNT9DWDYPz6DhfgQe914iiBfONMKn.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nx-powered-by: PHP/8.3.33\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://flatsome.hsdtit.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WooCommerce:10.6.0","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":97128,"size_decoded":97469,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11703)","md5":"cf2c082873ae41882bb28da66b28db07","sha1":"f64edc2c58ee6e63ebfcb7041c36cf2014032fb1","sha256":"c48eea4d472140f66f247de23e37f8900e0c74022601bf9c38a9aa4b2586224d","sha512":"c26935b0d9f2f00297a6b099ac4b63348d6eeed9d06e77ec451a5604a3ed7c8c920979c7a6d620c82724359982ccebd45ecb224a0270a1f146a6325af76e6dce","ssdeep":"1536:AFyp64AzamAgAz++DTj/nXBN/zdPLGrUnhESFdwXfqcdiUfRXjuoDPMplBxGnt9o:AAU4AzBAgAz+6nPBFEXOxGnXJfADtyB6","tlshash":"4493e8b38578103f938e92c79060f65df9e6b111cf468171f3fe56acaf92e92252260d","first_seen":"2026-08-31T18:47:19.025539Z","last_seen":"2026-08-31T18:47:19.025539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"flatsome.hsdtit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"flatsome.hsdtit.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"eu.api.fpjs.io/?ci=js/4.1.4\u0026q=jNhKjoC5tAGKbq5q9QPm","fqdn":"eu.api.fpjs.io","domain":"fpjs.io","tld":"io"},"ip":{"addr":"75.2.52.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:19.592Z","timestamp":1788201979592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu.api.fpjs.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 29 Aug 2026 00:00:00 GMT","end":"Sun, 14 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"66:43:BE:95:F5:DD:EF:96:EA:7A:09:7C:C2:BC:2B:C6:92:57:EB:CA","sha256":"F6:F5:D6:47:3B:BB:E0:AC:E8:30:3C:41:62:1E:77:26:DA:D2:5E:05:F6:7C:0E:C2:71:C3:2D:AC:04:68:7F:29"}}},"request":{"raw":"POST /?ci=js/4.1.4\u0026q=jNhKjoC5tAGKbq5q9QPm HTTP/1.1\r\nHost: eu.api.fpjs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://flatsome.hsdtit.com/\r\nContent-Type: text/plain\r\nContent-Length: 2978\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4418,"data":"ADOAŒ±ñmqdé\u0003ÑY«š\u001eªR\u001b¬¹t˜H?geù\u0007q:‚f‹€û¤8µ\u003e?´ïjáÃ‘;¥%»ÖzÊ®3´Ù\u003cS)µÄ,X\u0002ÌÈo\u0005\bZñ±\u000f‹X\u000b\u0007^nÑ\u000fOCî¶\u000fÊ8gIúS\u001a’´#ðÞôE\u001cÚ¢l¯m\u0018d\u001a”\u001f܎mu†^›—å\u0006Þ\u0011Œ\u00074\u001aˆkâQ–IÞ\u000eԗ\u0013ö\u003c`UCv\"Žž\u001eîÂ.\u0013\u001aÚFÓ±¢\u0002jx\u0026\u000b\f.\u0001Ú:C\u000e^óìÙ(¼.üOš¹M\u0005¶f{y[\u001d€ÞË_°-Y—©\u0011\u003cóv]oö0o\u0010Y;W^-p\u0002\u0006péN*pÒP'¼Þ߃ZZk2\u001f¤?ípSš\f\b\u0002 h\u0011\u0006‚5¬DSœ—¬\u001eg½d¥”Ôw6;Qwô\u0016?y*\u0019cNO—É®¦ú¤^¼†Š4\u0006ÕX¤¢­ƒöÌUž]¿Ž\u003e\u0017ŸG\\3zŒk\u001e\"‚4¥÷Z±ùMe¾\u0018 \bC8\u001e¾“ U0î“\u0007nõ8¿ˆWSÓ1£\u000eáå(íaá2\u0015µ™L3–\u001eõV:¦úìEanÙ\u0012÷\u003e°Fã\\\u0017—ñ#T³œÍáU\u001c!!í\u0003N«Ãµ‰‘s~o¤æ\nùî%€i\u0007É\u0006é—#w9\u0010Æb\u0003è’d¸úè\u0011\\ù‡\u0002\f\u0001!a3Põkl\t~¥‹Ä’\br\f±\u001eZƒ \u0019\u001fåœ9€1ËrÂ\u0012¢G»¢\f¨Íd\u0016\u00036Tè\u0005IZV±–\r\u0017Òï+åohû\u0026Z¸y\u000eÀ¡Q\u003c ÷cêv\u0003\u001c²\u0019Jma»®˜Ü‚rà\u0014ì0ç\u000bƒ³n{ \bj…ÛNBʧ%:xÿ\búüˆ\u0018%ßo\bä2¤\n\u000fˆ')÷x‚È\\ˆ¦ê\n\u0000èFß\u0017ü§£QÜƹ«”úQ±hÔ6pº?7Î\u0003Õ=5®±3÷™r£\u001f`\u000eð\u0001RÊnsÀLè­Ï\u0012¨?r-\u00134Ý%˜F´Wya¦›'ÖÌvÁÔm®ÖóòõxR0`\u0012\u0010]uÒÑF$×*c›\u000b\nÝÙjª»î…Q\u003e/’yý†W\u0018LQÁTAt§g¢ý\u001d)]_\u0007ó{Ð\b©Äw\n—üÂ,‚›+bî\u001e\u0002i“b2åé±jƒ2¨W=ߝYçÿÛlDF¢ÀCç®ß/ê°v×Ý´\u0012„V\tÁ´_º›\u0013¸ÿ«\u0001\u0005% Ö\n¸ûŸ=\u0010üqdõ,d¯»\u0019 0Ä碇_ªZXÇ5ã\u0004‚±Þëÿ^°ñfæ51!†v…\u000e\u0003‹\u0011ý\u0002‡ïkž1_3Î™ÏL E¸\u000b¡G\u0003˜')Jå̚Q¿Â·€±@²\u0017”üµãà\bs»Ö§·ÙGm\\ÑÁ\u001b…\rÓAt½ûÀó‡3ò\u0006ˆ2Sª\u0013’ÿ—\u0000½­¿Ç²™‚!㒳Oîê\u0004X©\u0017Õ)’Ã܎N0a»\u00151nq—¦\u0000\u000b‡\ngÀažàÛ±¬x}Õùq(\u0015\u0013%¸3O#é\u0011õAT%’+-úŒW)1L\rÈ6zÃ7\u0017¹JY¦\u0003È-à¤ÏœÝ\u00107 :.\u0017;Ff\u0026Ð$,\u000e\\hb|ºx\u0010\b\u0002$…mkU\nS© \u0019\b-Ž‚ éÖaʋba8u§\u0010Œ\u00168ØÅyëZA¼\u0010‹\u001eA\u001c@ôe2cUl/‡uɪpv%§²3F—P@pjòï\u003eÁ\u001b\u001d\u001e¾6\f\u0019NuIA „i ֐Š\u0011\t\u0005³¯àJµ\u0013ÿGÿqg\u001fŠ\u001d¼\u001aƒœ\u0015®‘\u001a*7³„\u0015=ÎN\u0007\u0010\u0019ƒ¸'ê–1“\u0016¿T˜ÉÚ\u001d‡ˆ\u0012¿ú™4•7g\u0014jǃ¦Ò[)\u0005GÔÎàBM9¥\u003cM϶F\u0012óY½{†á. š3?‡8çaf!)Q\u003c¨t_Æõ\u0003’*¶ÏÞc.‹\u0000e}´«,]1\u0015mˆ1\u000b̅y.†\t?î),ÚôÉ\\]7\u003eª½Hi„ÜÊ)oX\"ädÀêÈݎ\u00137\u0003›\tí °ƒáç!Ð\u003c:}ÖÛÆã\"cܐ\u0012¸d\"œXkï(\u003e\n\fÔ\u0017UôL?ªþ°\u000eák\u000bÆ\u0002}dÑSLŸÁXÁô€@\u0001l\u0019\u003eóü{\u0004hN±¥\u001d×\u0013˜Zõ'XÇݯ]šíçŽ\u001aê\u001a;ò: (5ö]\u000bOZ°(L\nå¨2ÜÀoù”ž²æ\\†êô\"¯j—\u0017ÿ—›6µ\u00030ƒd¯KÒ÷\u001fªfËdp,ÔÌ kŕiB׈ÛYç\\õùŽ–€S¹\u000e\u0010û—c\u0016~JA½äÎôjᐥlY|,yAb\u0001„¼(»LbPHþ¥t5¶,¯U©²¯º\u0014Nò«Ê¾-Ì8\u001aȤ‹ùczbup‘¬Á°°`|‚\u0026òkŒ\u001b§uÙuv\u0019\u001c¹«‰ôåØrx\\\u0000ß\u0010\u000bS¬m‹EÿKi\bm¼â\u0004\u001bë‚Ú•\u0014Ûïؔ\f\\gø\u0001Žud¸û2hg9F\u0017­ÁBl@\u00159Ú«\f\u000f\t‹AvK^Ö£¤4a}“\u001a-¬‰:Üynà\u0017Í'Rñ\u0005lñwÛ±%ÃÞçsÍ1\f™ø'F\u0019Ç¨±Œ^\u0012êP¿ ¥ÛPÙŕÞ鸇l\u00028ÿ,BUjn\u000bˆç\u0010Eõ¬Ùΐ×X\u0013ªj¾\u0016!IÛÅ÷;-¢°\bº—Æ\u000bÊ\r\u001b\u003e:B¹bà\u000eŸ\u0007ß)ÿíXº÷³é\u0026„öCúõ‰ÜI¹\u0001\u0018ãˆ\u0018áґòƒ¬\u000fEòL\u001ḑ†Ë£\u0011|\u0010ƒï\u001fÅiz8vìšÁR—5,\u001fëèÃÀ…iMü8֟\u0005A^s°2Ò+/âS\u0013ŠVEû6+\u0005ñc(aÎÔëÝtmE‘Z³ƒÂ”0êðvš+¨\u00264Ï|±Óòö¦”\u0011Üqý6f\u0001\u001fûô.‰AEr½¦ta‰L˜“\u0015;‘2\f•÷©~\\Cõ±«¬\u0002¤N¼iÍ=\u003cf 1”+˜þ“#쯨N\u0017øjô\u000fÐ \u003ctÑ­{\nCŽmʨ\u003c}b°Ë ,Gåö¯_¢Ý;Vgmê¢bt\u001dî[ú¨pŸi½*\u0004~\u000bϱbÈÛã\u00021Ÿ\u0005ŒUÆÙ¿†\u003ec¶®¦/°74ÆorqüÍZ øŸP\u001e,xb´\u0004ýãp,ÚÈU\f:¬úÜþ-³\u001c\u001c\u001bZL6xcnµÞó–þKeJNøGW\u001bçŠrA£'ø\u0016\u0011\u0002êÆÌU¯$\u0013\bú„\u0006\u0001\u0004òǕž÷=™¶F8-”¥ê\u0005\tž\b^\u001a—HM]TÕ0BÚQ-³\\Ìò`ږ\u0019OC¼\u0004\u0017\u001fé\b'–»\u0004ÊÓ¿æ\u0006ßlÅ\u0004\u0011O\u0016ë¦z¸K³)º\u0007Låî\nÉ\u0006Í\u003cÁæÆt¹[074¶\u0026†‚;ÌBì=\u0000ô÷î[l¨NxFMTA\u0011Y$\u0005¿¨¥4j¨º#˜½­*C·¨\u001d¹\u001eÏ\u0011¡ËGAì#à·(2âÔ¬bó·nRšaŸùÛ\u0002SÖ5ÿ˜=EX\u0010È;{d÷ù\u003e\u001e·\u0018”\u000fÐHZ~G1Cg½x\u001d¸ÜŒÆG\u0005ÐíP_=bJ`¡Ð\u0004`\u0001ènoº¼¸6bj'\u0003\u0005ðÆYVyüùÖ\u0004/˜¥\u0012ýõy„:WvJ\u001c²â/7ž\u00187­\r»F–‰•˜ãw(1„ð\u0010×ܗu\"`à¬B’ød›h£å\nøÁm̂MþM\u001b\u0012DzU\u0000›¬s\u0019BUñð)*nÇÝo\u000e{ÁøbŸÿ\u0019Ѭ³+OPZ»œd¯¨÷\u0015u(±ˆâcmÆÚm‚܉­NÌÙ\u0019+êèõ’ì5+ÜiÚøŒÑ@ƙ\u0015´I!ɱ‚¿²ýØy'\u0003ÌM’˜t\u0002´oí@,€]\u001bÉ_ºv©†ª/ã³.?n҇ü\u001f„êmk™ËÜ\u0001\u0002­lߓ¾Òñ™Ñ\u000fR‡æ\b‘çÕ×CE:È\"\u0017dË6\u001a\u001b»UB¶ê”ÔÝê¯÷6͏Ášï\u000bɌ¿¬úŽq¹\u0014\u0013å-AU\bÔäÁT8oû\u0001¬{×C—ÑåÙ§²GB‰™Ëä\u0018\u0000£žq£û$[e5µ÷B¨œ‘W%³O\u0006(å²À·¿Rò+rN‹\n\u003cÒ«ƒÉH06'Yåû=x\fN“à\u0010\u0010ïmgmH\u0010Äߨ·?\u0012ðÏ7Ýï\u001d€oÂ\u0013cšQ/ä—YC\by— Æ˜Ý6;7\u0019.\u001b\u001eéõ7\u0010ŒÂ:ž\u0001\u0004°~,ˆ.õ.ãTYøñ\u0016¨óðZ¦ŸÕaÝðF‰‘Ê\u0007”\u0017Þ,\u0007”ÜqÁª\u001f9ȗ©çImФM«ÍÏ (,Y³¦ÒU.ô틁Â\u0026ÁãÅEõø\u0004må˜\u0017ÙÇ(Y¤~~ɬ{Aá0\rœUzèÐ×PܓpBB¢k\u0003íøb\u003c\fòrÕã°¦¸iIÿ\u001dÍ!D\u001eS/\u0002́©™@Ü©}2“Üü{΅ý~UúÂ\u0003%#˜]\u003cP.PPo5T\u0004û\u001c¡#aÎYq8éç\u0006…¼\t]\u001c­†\tíù8.\u000fŸ\u001b#Õ\u0019MeÎ\nÞò\u0018\u0004hϊ£:á;?\u0016·$Žtjàÿ \u0004…¢eó”.2#+ R|\u0014p¨\u000fóȑ{h\u0019_,\u001f\u000bö u¥fdÌ\u001bTˆ\u001d\u00032"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 18:46:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 447\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://flatsome.hsdtit.com\r\naccess-control-expose-headers: Retry-After\r\ncontent-security-policy: default-src 'none'; frame-ancestors 'none'\r\nreferrer-policy: no-referrer\r\nset-cookie: _iidt=h7SNrzj4pSX/dJMokw7CClktIlveK05dGA77FbKMo6c2VwyjmP/6T3S/vumcaXJ4vh7Mw+T64KsSTL8cfgFpDKhPBGXy2N4iDTXqqnYEeYuEPw==; Path=/; Domain=fpjs.io; Expires=Tue, 31 Aug 2027 18:46:19 GMT; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=63072000\r\ntiming-allow-origin: *\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"_iidt","value":"h7SNrzj4pSX/dJMokw7CClktIlveK05dGA77FbKMo6c2VwyjmP/6T3S/vumcaXJ4vh7Mw+T64KsSTL8cfgFpDKhPBGXy2N4iDTXqqnYEeYuEPw==","quoted":false,"path":"/","domain":"fpjs.io","expires":"2027-08-31T18:46:19Z","raw_expires":"Tue, 31 Aug 2027 18:46:19 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_iidt=h7SNrzj4pSX/dJMokw7CClktIlveK05dGA77FbKMo6c2VwyjmP/6T3S/vumcaXJ4vh7Mw+T64KsSTL8cfgFpDKhPBGXy2N4iDTXqqnYEeYuEPw==; Path=/; Domain=fpjs.io; Expires=Tue, 31 Aug 2027 18:46:19 GMT; HttpOnly; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":1195,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2b7d0b21062c83ad63dfb133a60e6c6d","sha1":"defab1a7c3e5429985927b613c311ce55b74f96e","sha256":"7df73baa9ef3a9980a3df5b1d7a52c07b7137d2905ec887bc40e4ddaec8478a0","sha512":"fee240a798a15f93ef6702155a239633fc5d7da61297006bd4e9d6742a9898d8dee3e4f89fe4d5bfe3fa4dd5948f75fc75625714b4e041d46dd2c9c3de12d3ea","ssdeep":"","tlshash":"c9f02376e77975c762924e54003c8522d309566f442b48c955ba39208cf9524980d94c","first_seen":"2026-08-31T18:47:19.026936Z","last_seen":"2026-08-31T18:47:19.026936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":2,"send":0,"wait":108,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4irYu4/yC/l/de_DE-j/yqtZZIToN2-G_QJBNg2xzOUjLpTeG1m3T.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.054Z","timestamp":1788201975054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/v4irYu4/yC/l/de_DE-j/yqtZZIToN2-G_QJBNg2xzOUjLpTeG1m3T.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Tue, 31 Aug 2027 18:46:15 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: 0IljlYAg2WxwEM3C1duJJA==\r\nx-fb-debug: hArTkUvKTNPUhAHKRPbiC25XZicMXpw6d9FwbofDT2DBfa+35t8oSyRsQJBCaJxjHu6bCm7fn35N34C9aNllIw==\r\ncontent-length: 198849\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=72, mss=1232, tbw=186137, tp=169, tpl=0, uplat=458, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":806288,"size_decoded":200845,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8922)","md5":"6c6c19600f4f0239a4b3faa4cc807894","sha1":"6503f196496cf8bf17b7f4b21ce9995a14275204","sha256":"91830f54bac65285f0703671c05e8af7187a1db064dfeed4b6e4944c06143ccf","sha512":"8efcc52634aab4d4a489fa48b6c08dfd335a821320c6ed39b271a59d6fbc9f0ec3e90c87bf1756bf8feccd6969add4b3de827dc12de943934a0f6d349a6bff27","ssdeep":"6144:iSEladdSInhBk5ykYcgBbhh6VXhIqpSVOJryoXXMSCEiMJpMa7MgMFWhA:izadk6hzkYciv6VXmq/VCDL","tlshash":"33056ddc789d74156eb715f690af0207733c240b280d8560f5a2feaa66b888e6137fdd","first_seen":"2026-05-20T11:36:03.11072Z","last_seen":"2026-08-31T18:47:19.028099Z","times_seen":10,"resource_available":true,"data":null}},"time_used":742,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":480,"receive":248,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iNHs4/y7/l/de_DE-j/OjVH_yjCtmZvkTPK6PGAI0ep27YIXYeUE2zNLgVz54WoWJukooR-9NvRi7mWBMSxEcAv3wM14GGu4a7eSNpDNxgKVIPNHOqVL96YEovco6eoyu_uK3aPyME2r.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.056Z","timestamp":1788201975056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/v4iNHs4/y7/l/de_DE-j/OjVH_yjCtmZvkTPK6PGAI0ep27YIXYeUE2zNLgVz54WoWJukooR-9NvRi7mWBMSxEcAv3wM14GGu4a7eSNpDNxgKVIPNHOqVL96YEovco6eoyu_uK3aPyME2r.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Tue, 31 Aug 2027 18:46:15 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: loMo9AR/ZWCEkWQAOOryQw==\r\nx-fb-debug: g974PQtllK49CMgFvFKq4+ivD39sFsMc0CbU1rvYeGDNeEf9Y7N2mX1zGh99bZSS0r3enDlDUrPUVKDFvyCuEw==\r\ncontent-length: 110901\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=72, mss=1232, tbw=186137, tp=169, tpl=0, uplat=458, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":401022,"size_decoded":112897,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8084)","md5":"49f3285f5a6ad7dc2571f327f34d7465","sha1":"f1b316ed90098f367dc2840bf22e372be23bfccc","sha256":"2c0ce42fb0c6cbab0439526f6c8a8f062725db065089e360a88a3e5d5ca5eb77","sha512":"980149187fab1f6f14a3cecbbc91aaf0afa7ca44c2d0ec835ed28c7ded9683a358a6c84867d8f499657acb9d762a2af63584d16448a150a339882bef598663d0","ssdeep":"3072:YVJWqwVr3BvyCj9h86XF/dp2naZPQYyjd1r4wKBBA8WrOELfSqbooOwrVMp29mir:YmFdp2aZmTPKBBAPrDnbvVMp29zr","tlshash":"e0844ce87c4474946bbb55ba90bf014b733d2859150dc9a0f1a2fde6b8a48ce1133ebd","first_seen":"2026-05-20T11:36:03.115368Z","last_seen":"2026-08-31T18:47:19.029244Z","times_seen":10,"resource_available":true,"data":null}},"time_used":710,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":481,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flatsome.hsdtit.com/id-review-page/login/css/HpEiFYDux5j.webp","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"ip":{"addr":"103.200.23.159","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:13.865Z","timestamp":1788201973865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.flatsome.hsdtit.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 08:07:35 GMT","end":"Sat, 10 Oct 2026 08:07:34 GMT"},"fingerprint":{"sha1":"95:00:4E:C0:78:D7:CB:EE:E0:1A:C5:F7:17:58:13:A9:B8:61:57:50","sha256":"B5:E8:10:B3:B8:C3:48:16:2E:AE:0C:4F:36:B1:FA:DF:BF:11:09:EA:A0:28:21:FB:FE:14:6F:91:15:9F:F2:0F"}}},"request":{"raw":"GET /id-review-page/login/css/HpEiFYDux5j.webp HTTP/1.1\r\nHost: flatsome.hsdtit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://flatsome.hsdtit.com/id-review-page/login/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 18:46:13 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 11 May 2026 07:30:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 193546\r\ndate: Mon, 31 Aug 2026 18:46:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":193546,"size_decoded":193834,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14138bd70dd9dc9d5e59d2c9f94a2462","sha1":"8bfccfbdb378d0d019f6b15b7e8bd1d6b60ce850","sha256":"1eed452e2a650a014e75cade0f8faa5bac3a4eaffafb270b8ee73891c9af316e","sha512":"5e2d49f06413bd8239889b28cfcafec93360b029d266b0459843a3d0e41e7c81373d3cbe6692c18d47d12de9b304a6ca085e8235e27847b90e8ad3e8951f18a8","ssdeep":"3072:4fT2pZK6xAvvriIXKZ2CM+HGKv8daF595yTASgErg9Twy2V7WGQ2OS176:4fT8RxA1KZN9GKUdafLc9rgNp2dW52O4","tlshash":"b8141394f8f3eb13fd4db8f6688b188cb456d0611b3da86b4873fb5007e8667482615e","first_seen":"2026-01-31T13:07:42.73442Z","last_seen":"2026-08-31T21:34:20.705059Z","times_seen":4259,"resource_available":false,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":921,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"flatsome.hsdtit.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"flatsome.hsdtit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"flatsome.hsdtit.com/id-review-page/login","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"ip":{"addr":"103.200.23.159","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T18:46:11.689Z","timestamp":1788201971689,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.flatsome.hsdtit.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 08:07:35 GMT","end":"Sat, 10 Oct 2026 08:07:34 GMT"},"fingerprint":{"sha1":"95:00:4E:C0:78:D7:CB:EE:E0:1A:C5:F7:17:58:13:A9:B8:61:57:50","sha256":"B5:E8:10:B3:B8:C3:48:16:2E:AE:0C:4F:36:B1:FA:DF:BF:11:09:EA:A0:28:21:FB:FE:14:6F:91:15:9F:F2:0F"}}},"request":{"raw":"GET /id-review-page/login HTTP/1.1\r\nHost: flatsome.hsdtit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ncontent-type: text/html\r\ncontent-length: 795\r\ndate: Mon, 31 Aug 2026 18:46:12 GMT\r\nserver: LiteSpeed\r\nlocation: https://flatsome.hsdtit.com/id-review-page/login/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T21:32:45.330539Z","times_seen":18207950,"resource_available":true,"data":null}},"time_used":947,"timings":{"blocked":-1,"dns":4,"connect":312,"send":0,"wait":312,"receive":0,"ssl":319},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"flatsome.hsdtit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"flatsome.hsdtit.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iZBp4/yP/l/de_DE-j/aTvLpEMiMqYV15tj8h63LNLwCYbyWCy8lRtKQGwG0ihEa-9ML_Y_MRXPtSESTGmzj1SR_169Kn2AO-Qx8lcabVTDOwgx-s7CoHnI3XLoYQF64vO2zT06LS1itQWShO2h-PYdZEoStQUE_H7OQEKEXaGJ8DTvtL32s_6TN5GUvR7zmf91bYZLjz85TBvoXroJ7K59X9C3AwQd1t3qNKef6G-hKocd89O_LiCUWDnXRwDHCkV8R1onn-JtdZ7PJrsOfCedTPWK80sYO5qoQ8aCFM-z_0Q2ncNh9-DZBIN8jKeHWrECl3_n5Wu6jBGHRQaSS1OrajkDar.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.060Z","timestamp":1788201975060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/v4iZBp4/yP/l/de_DE-j/aTvLpEMiMqYV15tj8h63LNLwCYbyWCy8lRtKQGwG0ihEa-9ML_Y_MRXPtSESTGmzj1SR_169Kn2AO-Qx8lcabVTDOwgx-s7CoHnI3XLoYQF64vO2zT06LS1itQWShO2h-PYdZEoStQUE_H7OQEKEXaGJ8DTvtL32s_6TN5GUvR7zmf91bYZLjz85TBvoXroJ7K59X9C3AwQd1t3qNKef6G-hKocd89O_LiCUWDnXRwDHCkV8R1onn-JtdZ7PJrsOfCedTPWK80sYO5qoQ8aCFM-z_0Q2ncNh9-DZBIN8jKeHWrECl3_n5Wu6jBGHRQaSS1OrajkDar.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Tue, 31 Aug 2027 18:46:15 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: HwSi9hak3q91q70gO3ONhw==\r\nx-fb-debug: xudroWdRdOMqwsA6eo9Idh5zky7C+MJVDbe9MSzoYaJNpZdX4bDu4+5icbaBlOB24JZkvKv82XQqNmWrSGKquw==\r\ncontent-length: 10797\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=25, rtx=0, c=24, mss=1232, tbw=5081, tp=9, tpl=0, uplat=135, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37619,"size_decoded":12788,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5492)","md5":"7626584c69cd82c1ae3596bb568d75a4","sha1":"60a8769c1d51388c594ac23890d1ae6088792c11","sha256":"a28073f86c24c3ac82a1ef40ce55153cd453520a7b87a07ec1aa8e232216cf43","sha512":"3cbc6290b7f895ea7ab662572bceb7cf40e505cc413d25a9dea8daffa6c6326262c2bd92dae273b1f65a3600741b97647dec421d90289e1f70c56f0a31b8d7f1","ssdeep":"384:xZk7HUHKnpv+JqwCZFA67elh4KEdvdp7yg88vvyBvMzBKPxLBo+ODBFyDcLxewHF:cnpv+BIFA66yygZXdMQDBEYLxB","tlshash":"e4f21bccb98d38a52dbb359ae03b0acf763c18655419cca495b3e98de1208ef607357d","first_seen":"2026-08-31T18:47:19.031361Z","last_seen":"2026-08-31T18:47:19.031361Z","times_seen":1,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":157,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iU7G4/yy/l/de_DE-j/Mu5rQDdK1U2.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.064Z","timestamp":1788201975064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/v4iU7G4/yy/l/de_DE-j/Mu5rQDdK1U2.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Tue, 31 Aug 2027 18:46:15 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: KPCxWHziBfy/pxX/vyKlKg==\r\nx-fb-debug: 3XGTx9a5/EqdJhrUIG+jx6vl914dLoJ580+j5Vstcu2wt5qHGHezobA/rIQuOteUEjnUw2EhrSpOQ5C0aEzDkg==\r\ncontent-length: 47606\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=72, mss=1232, tbw=186137, tp=169, tpl=0, uplat=458, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":184066,"size_decoded":49601,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6386)","md5":"0c992fd0bd6a539ab11e876a293b5a4f","sha1":"2c0b06c0f652f58affbf966014c1ebf60e40a5fb","sha256":"5c4c7f258a3661bba79b42c7019a77b730edbebe1b6da4dbca94a60dab443db6","sha512":"448b095ba538e20815e3c37f9e4bde7c4de3a373e1986d29294f149c39203c77ea0ec95348ff0769fffca7b3f86675e809769c360143697a063146f9d694ff09","ssdeep":"3072:cozkSv90qSYYwcwogpj0/pLMHswYLzNkebZeH:cc9Hht4pLMrYLS","tlshash":"d9041bcdb495385609b71469d0af2b4bb77d38c7240dc568e2b5df822a28e8f5237b1c","first_seen":"2026-05-20T11:36:03.117913Z","last_seen":"2026-08-31T18:47:19.032364Z","times_seen":10,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":481,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iCqa4/yc/l/de_DE-j/I7zisu2TvZHc4-qegGtrnP1c4kEGeaT8_8Lit16ISbnHq67Jyk3OnED4j4SE1-LXf2fig5u4TEIHY1jsTWgm_fuv4a7Z0YNiNQSfoaUWLY9OQl_HJdYtTNCKNw1JtOGoHMq0HwsLVWymW36u4yAsukPWHDsVjQqltBeBhC8lbkhBm8OTh2otzgdunJl3g9q4pR78qLs-XSTXFxUbB69VqNNp4Gm1BHl-lElGzTH4Lah-t55E7mOl6Gkjq0OVeavkZc4HIHnCpIt4LvFvAsYJZCcc2ZP1Mq8wypiAW_bfkF94AKekI-DNAdmh5DEndjkC1LYw5WWi7I.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.047Z","timestamp":1788201975047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/v4iCqa4/yc/l/de_DE-j/I7zisu2TvZHc4-qegGtrnP1c4kEGeaT8_8Lit16ISbnHq67Jyk3OnED4j4SE1-LXf2fig5u4TEIHY1jsTWgm_fuv4a7Z0YNiNQSfoaUWLY9OQl_HJdYtTNCKNw1JtOGoHMq0HwsLVWymW36u4yAsukPWHDsVjQqltBeBhC8lbkhBm8OTh2otzgdunJl3g9q4pR78qLs-XSTXFxUbB69VqNNp4Gm1BHl-lElGzTH4Lah-t55E7mOl6Gkjq0OVeavkZc4HIHnCpIt4LvFvAsYJZCcc2ZP1Mq8wypiAW_bfkF94AKekI-DNAdmh5DEndjkC1LYw5WWi7I.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Tue, 31 Aug 2027 18:46:15 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: TX51+DgZpk+AqvdDuVsYoA==\r\nx-fb-debug: DogDVoVofQOzxocbD4lfg9K5nVJwNUhj5lkodr4Kl/R1edBQrpC5w6XWurz4KLgn864dp82JKgD4S8NMq3PEmw==\r\ncontent-length: 184616\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=232, mss=1232, tbw=691385, tp=669, tpl=0, uplat=623, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":730403,"size_decoded":186613,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6354)","md5":"0565a0c9a09acbd9bbd7440c08523583","sha1":"ce5effa5334a3fbfc0555563ecd498a16cc4590a","sha256":"933aac863ea9a963c1619959f4f01aa595093210c74dfddd206aa1f4adf545d1","sha512":"91531716cdfa42356b1a67051a3b05218b2f3e92c6c452a3344f443cdc95a20e0580148f00f91c1f2721dfe40333b8eb94783ff5e3f734a11156e3e372c07a31","ssdeep":"6144:s6DjnuOBUoWV00HjAKRp20zxTj3Z6+MvOMRRnLexl8XBaP1hTsJu4yvqOToqC:NWV08EElZCLcgtAqOT+","tlshash":"7af44bce799534165ab720b690bf020bb37c2956380dc120f166fea6793d84e523bf6d","first_seen":"2026-05-20T11:36:03.122869Z","last_seen":"2026-08-31T18:47:19.033464Z","times_seen":10,"resource_available":true,"data":null}},"time_used":767,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":645,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iYeD4/yh/l/de_DE-j/W3DhP5IP7AS.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.051Z","timestamp":1788201975051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/v4iYeD4/yh/l/de_DE-j/W3DhP5IP7AS.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Tue, 31 Aug 2027 18:46:15 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: GUV4kAeRqyjYpBT+eNu/og==\r\nx-fb-debug: QL8C27IcpUhm9RQLXAQnTlB77Nq2l7NTZoFPGTFU5GZfsW0s3AtoMqYCS9zsEjEALGW9WcnJye5kzyPJRkLhnQ==\r\ncontent-length: 239465\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=72, mss=1232, tbw=186137, tp=169, tpl=0, uplat=458, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1012375,"size_decoded":241461,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18705)","md5":"437712eeabc155e936b6012560b7572d","sha1":"22d703f4c4c6dd49f9d63c8f435d5db9bcc04461","sha256":"85080d701c758df29089202c227efe0041413a14e63b2b358ce0dc96f880f8d5","sha512":"0d94c8db7da045e38eae6184ed820a2275740e4dcce86842c615f5939141f72a2570275eb0ed99e48995c2b660d2ede4cdb42a69eccf34c28190e1eb3d6df5e7","ssdeep":"6144:5O+3kTokC8buv9BMgG8hd/GdWh7HLNFeURoYYCW23tOu3U7qG8B2QDA8VY8Ym7jM:U9Qd/GdWNrGg9YLStMKVY8YmP3VQeVV4","tlshash":"31252a9df58870622bb720b780bf5247733d6886240ec0a4b9b1ddd56a689ce5233f7d","first_seen":"2026-05-20T11:36:03.10676Z","last_seen":"2026-08-31T18:47:19.034507Z","times_seen":10,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":480,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flatsome.hsdtit.com/rsrc.php/yP/r/kUc6oHI0fJd.woff","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"ip":{"addr":"103.200.23.159","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.584Z","timestamp":1788201975584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.flatsome.hsdtit.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 08:07:35 GMT","end":"Sat, 10 Oct 2026 08:07:34 GMT"},"fingerprint":{"sha1":"95:00:4E:C0:78:D7:CB:EE:E0:1A:C5:F7:17:58:13:A9:B8:61:57:50","sha256":"B5:E8:10:B3:B8:C3:48:16:2E:AE:0C:4F:36:B1:FA:DF:BF:11:09:EA:A0:28:21:FB:FE:14:6F:91:15:9F:F2:0F"}}},"request":{"raw":"GET /rsrc.php/yP/r/kUc6oHI0fJd.woff HTTP/1.1\r\nHost: flatsome.hsdtit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/id-review-page/login/css/rkR9nETCCfCEkX3WI8UJzenJ_BbYUv0YNT9DWDYPz6DhfgQe914iiBfONMKn.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nx-powered-by: PHP/8.3.33\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://flatsome.hsdtit.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WooCommerce:10.6.0","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]}],"data":{"size":97127,"size_decoded":97468,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11703)","md5":"f05d4b0eea49157777bca82f44cd1de4","sha1":"24444b7647df05ecbd9397559bc67cad93905cd5","sha256":"5f6cdc1b5a271686cfb8c93d7b68245f89207a9eb318750bca46eaa386afb613","sha512":"999550a9ce4941af8e3575f0e5cb83b45216a346ed68f982b0b555ff3434e3b1f80ac3365bdf84e468321dad0e12a4cc919dda852e7ddc16d917c056f89f439f","ssdeep":"1536:AFyp64AzamAgAz++DTj0JXBN/zdPLGrUnhESFdwXfqcdiUfRXjuoDPMplvxGnt9o:AAU4AzBAgAz+BJPBFEX+xGnXJfADtyB6","tlshash":"dd93e8b38578103f938e92c79060f65df9e67111cf868171f3fe56acaf92e92252260d","first_seen":"2026-08-31T18:47:19.035538Z","last_seen":"2026-08-31T18:47:19.035538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"flatsome.hsdtit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"flatsome.hsdtit.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"flatsome.hsdtit.com/id-review-page/login/","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"ip":{"addr":"103.200.23.159","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T18:46:12.646Z","timestamp":1788201972646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.flatsome.hsdtit.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 08:07:35 GMT","end":"Sat, 10 Oct 2026 08:07:34 GMT"},"fingerprint":{"sha1":"95:00:4E:C0:78:D7:CB:EE:E0:1A:C5:F7:17:58:13:A9:B8:61:57:50","sha256":"B5:E8:10:B3:B8:C3:48:16:2E:AE:0C:4F:36:B1:FA:DF:BF:11:09:EA:A0:28:21:FB:FE:14:6F:91:15:9F:F2:0F"}}},"request":{"raw":"GET /id-review-page/login/ HTTP/1.1\r\nHost: flatsome.hsdtit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 19 May 2026 08:12:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 75872\r\ndate: Mon, 31 Aug 2026 18:46:12 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":416142,"size_decoded":76124,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (64639)","md5":"cfae12ce12f1c175afb1ecaccfa97b2f","sha1":"022a9af75790f8623f8b04b0bb8892acfe98d923","sha256":"2b6c13f5784dcb15fe1b2c30b44556f16ff1599efb1f77fc43b3974dd170610b","sha512":"0746e854e2abd14cfbbc206d4a7da72df069365bd57f1145affd89be4b1cb95bb06f2529bb1a3c9ccedb665b66d57ffee2147989c94193e812c823bad2aa4b3d","ssdeep":"6144:dHo7qZjispgNmzUhE+GnIWnIjiD99jifsdaibYkIkKxVdexZwFnlq99rnE+w0Giy:tew7hbO9","tlshash":"f5945d05f904c4362b3b0ff2e4a67907bb6c0c479a8449e4e1ad6e7975c67b8231bb17","first_seen":"2026-06-23T13:48:18.213582Z","last_seen":"2026-08-31T18:47:19.036431Z","times_seen":4,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"flatsome.hsdtit.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"flatsome.hsdtit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"flatsome.hsdtit.com/id-review-page/login/css/rkR9nETCCfCEkX3WI8UJzenJ_BbYUv0YNT9DWDYPz6DhfgQe914iiBfONMKn.css","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"ip":{"addr":"103.200.23.159","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:13.849Z","timestamp":1788201973849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.flatsome.hsdtit.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 08:07:35 GMT","end":"Sat, 10 Oct 2026 08:07:34 GMT"},"fingerprint":{"sha1":"95:00:4E:C0:78:D7:CB:EE:E0:1A:C5:F7:17:58:13:A9:B8:61:57:50","sha256":"B5:E8:10:B3:B8:C3:48:16:2E:AE:0C:4F:36:B1:FA:DF:BF:11:09:EA:A0:28:21:FB:FE:14:6F:91:15:9F:F2:0F"}}},"request":{"raw":"GET /id-review-page/login/css/rkR9nETCCfCEkX3WI8UJzenJ_BbYUv0YNT9DWDYPz6DhfgQe914iiBfONMKn.css HTTP/1.1\r\nHost: flatsome.hsdtit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/id-review-page/login/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 18:46:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 11 May 2026 07:30:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 329874\r\ndate: Mon, 31 Aug 2026 18:46:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1299272,"size_decoded":330205,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e89bd6c8654dc16b43801ba09b92cdd4","sha1":"38582bcba012d173723ae500322c003b4b985884","sha256":"078610cc367350af9eb778e48a618881042a6e0a33e2e70111762bdaf76c5bad","sha512":"db45680f98c560a4c1a9b2e3d100c77ec7dd3e1dbe546664b2c80bd1d8ec1539825467d6bfe543fca609a7eb3967840d1a4f4c047a47b735e6a7ac5e460c3ced","ssdeep":"6144:FM2o6R6Akpmb+Hh/BjmWaDzY0HdwdcQcccfOe+OtXHENcDBBMlQRLDuGNXU9U/WE:FCc+lBYYlcZOwMxQRPuGNkhE","tlshash":"c52593a6e751833cbc27d25993adbeac22187e42de161bf2f642717092c7bf81933514","first_seen":"2026-05-10T21:44:31.941654Z","last_seen":"2026-08-31T18:47:19.037454Z","times_seen":54,"resource_available":false,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":625,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"flatsome.hsdtit.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"flatsome.hsdtit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yg/r/WiU7hFkhvzG.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.043Z","timestamp":1788201975043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/v4/yg/r/WiU7hFkhvzG.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Tue, 31 Aug 2027 18:46:15 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: tgYL1ENdGoqcFhDnZBN8ng==\r\nx-fb-debug: eTJkAi6nSMyIqPz/jtfKYIrPO0oUV6LVyr6SObw2B5x5hblQJ78ZfX/2HM1hS0yvdrPs+986a3UFW8dU6u69gQ==\r\ncontent-length: 81584\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=23, rtx=0, c=35, mss=1232, tbw=48585, tp=48, tpl=0, uplat=275, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":313657,"size_decoded":83577,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10931)","md5":"0a9eb1a1fb9a2a45cc5218550699f90f","sha1":"5d8d03a478b50e566595468d0d5c5e4da5b593d1","sha256":"f12a06990808f1d24207e299dcc5aea7bf417f12ff4aa47398b61ce889214583","sha512":"5ab0a72f7a4804984572c00d5a88969f9a8b4a79ce909e4e1ab430dd86a7df37ad3665c6dcee6b870076165d009ada9bd04508e7460aaba55a48d82ee0e3f764","ssdeep":"3072:he54IT2LA31EjrxyoATIe1jAGmqRh3yp2mCpkzhx2:ieACjrxyoAT6Ghh3yp2mCkO","tlshash":"256409cdb6d5b42113f375b6807f920bf2396a56684d8164e5a8d8e16cb884e8333f3d","first_seen":"2026-05-09T06:01:36.232063Z","last_seen":"2026-08-31T18:47:19.038962Z","times_seen":431,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":7,"connect":30,"send":0,"wait":298,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iJVq4/yU/l/de_DE-j/L5g2L_ScOYG.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.058Z","timestamp":1788201975058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/v4iJVq4/yU/l/de_DE-j/L5g2L_ScOYG.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Tue, 31 Aug 2027 18:46:15 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: hTUIinzbavOX1YhLTirYEA==\r\nx-fb-debug: UrznQbBGPQLpVE3MzD0D4kIqAmTKzQT38HIl4EA0fSk0JzLKw5Hgj+o/7rUKzknvaE6HjqZYcRAqoWipO1vCeA==\r\ncontent-length: 34504\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=25, rtx=0, c=26, mss=1232, tbw=17657, tp=21, tpl=0, uplat=159, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":135006,"size_decoded":36497,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21530)","md5":"eb1531cc9fb5e472da5dbe4e228cb856","sha1":"33c42e63ea62fcca4bad7514deef98c8872902a5","sha256":"a38013bb17de56a89079b7bd2d133ba38d0afb92c2ee2a6b6330cd8801ffcfd8","sha512":"78ca138ff034dcf1241e5142c454e2cb38008ed3b7a50b2af0dab15cad9a4a1a8ad1502bb0e0324ad051f1dbe75d54cbe333bd013e253b12f5f52ec93bbf1568","ssdeep":"1536:JZAiU9///JRUkCrsQJR8xCBBmb/3KNHT0PVcI:JZWTRV8R8xCTmT3KNHK","tlshash":"01d37d64ac492abd3d6f4efa816bd149726c4404f604ceb4f1d1feb99a488cc972371e","first_seen":"2026-05-20T11:36:03.11239Z","last_seen":"2026-08-31T18:47:19.040845Z","times_seen":10,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":182,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flatsome.hsdtit.com/rsrc.php/yf/r/ipwqPKyH2FY.ttf","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"ip":{"addr":"103.200.23.159","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:16.172Z","timestamp":1788201976172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.flatsome.hsdtit.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 08:07:35 GMT","end":"Sat, 10 Oct 2026 08:07:34 GMT"},"fingerprint":{"sha1":"95:00:4E:C0:78:D7:CB:EE:E0:1A:C5:F7:17:58:13:A9:B8:61:57:50","sha256":"B5:E8:10:B3:B8:C3:48:16:2E:AE:0C:4F:36:B1:FA:DF:BF:11:09:EA:A0:28:21:FB:FE:14:6F:91:15:9F:F2:0F"}}},"request":{"raw":"GET /rsrc.php/yf/r/ipwqPKyH2FY.ttf HTTP/1.1\r\nHost: flatsome.hsdtit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/id-review-page/login/css/rkR9nETCCfCEkX3WI8UJzenJ_BbYUv0YNT9DWDYPz6DhfgQe914iiBfONMKn.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nx-powered-by: PHP/8.3.33\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://flatsome.hsdtit.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 31 Aug 2026 18:46:16 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:10.6.0","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":97125,"size_decoded":18731,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11703)","md5":"457fbde26e26be6c80e8c8641a084781","sha1":"a6e3d6c58441e41ea05db7287405bc73a0132117","sha256":"6aaa537355f7d4cd6f185fabef401eedeac71e9c72be1e7868d4c6814ca49a03","sha512":"1e21023670f9837f0ed26c5ba69ba8beda41c65cd934de92a44c14963a0bf142e871a6aaa20ef0b0eb1ee3f8545d449a3963169d510ebda2e31b4e068e9d5a5f","ssdeep":"1536:AFyp64AzamAgAz++DTjJZXBN/zdPLGrUnhESFdwXfqcdiUfRXjuoDPMplGxGnt9o:AAU4AzBAgAz+QZPBFEXdxGnXJfADtyB6","tlshash":"4793e8b38578103f938e92c79060f65df9e67111cf868171f3fe56ac9f92e92252260d","first_seen":"2026-08-31T18:47:19.042592Z","last_seen":"2026-08-31T18:47:19.042592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"flatsome.hsdtit.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"flatsome.hsdtit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"fpjscdn.net/v4/jNhKjoC5tAGKbq5q9QPm","fqdn":"fpjscdn.net","domain":"fpjscdn.net","tld":"net"},"ip":{"addr":"162.159.141.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:13.844Z","timestamp":1788201973844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fpjscdn.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 11:12:20 GMT","end":"Mon, 05 Oct 2026 12:12:08 GMT"},"fingerprint":{"sha1":"08:C7:51:60:CB:21:2B:80:58:BF:AC:B5:32:8B:CB:54:99:1A:CC:7B","sha256":"30:ED:8D:2D:BC:0A:E2:54:FC:0E:FB:D9:63:F1:51:BA:17:61:27:E8:72:03:05:E7:AA:AB:49:E8:A9:8F:60:23"}}},"request":{"raw":"GET /v4/jNhKjoC5tAGKbq5q9QPm HTTP/1.1\r\nHost: fpjscdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 18:46:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3772, s-maxage=595919\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\ncache-tag: procdn,procdn-apiKey-c501c045ad9731ee89b30100438b19bb8e4b087e17cb433bc28f308edbf2e139\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\netag: W/\"PuDEqEvjzHPw6okN9aHiEefR7Z8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a33e32743d635a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193930,"size_decoded":74803,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65431)","md5":"451e60d7514c3ea5f46396816f0a019e","sha1":"3ee0c4a84be3cc73f0ea890df5a1e211e7d1ed9f","sha256":"65bf275eb1a24c196609abfe81cdc78df559f351ad5d53c468032526d8b63456","sha512":"7510350c0729da93d7f0bb3c270b39923d10b4f903942630ddfe55a2ad2d8f3560a1e9e30b9c1f46ea1fe5b9455c31d59ced4d52a9abc6219c701fafb4d4febe","ssdeep":"3072:bEQFQ7SbohDTvDbq9y8nni76mtR/6w+pbqokP:T67S6snnmtRSwpP","tlshash":"0714a3d8b2e6f2916372eca140bb040af67f3c96350c5984c1199ad53e3958bda37f1e","first_seen":"2026-08-31T18:47:19.04381Z","last_seen":"2026-08-31T18:47:19.04381Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4940,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":1785,"receive":0,"ssl":3150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iDc84/y5/l/de_DE-j/KsE361B_lE5.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.062Z","timestamp":1788201975062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/v4iDc84/y5/l/de_DE-j/KsE361B_lE5.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Tue, 31 Aug 2027 18:46:15 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: v6RxaVsiHP9hq5wODzOHmQ==\r\nx-fb-debug: m2L8DQ6bG/wNw9vtPM1e7obv62VugHmQGR0aWrzMiZAoTYRMc9O9rhNO3RPpEdk4+5zIlkBOXiuo0h14imVNzw==\r\ncontent-length: 93038\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=72, mss=1232, tbw=186137, tp=169, tpl=0, uplat=458, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":483141,"size_decoded":95033,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39396)","md5":"a4128ea4d2bf55166608cf0e061e9dee","sha1":"c51357323db38fa5f426a43a28989bea5ce7224b","sha256":"9288361accc2dbdeaca3239810332d7789939a1eddd5c16dee170e21d0d3d2aa","sha512":"2272040104dd7cb6570ecaf523faef0d79decaa96ae27d2983afcc210e3c7c291d3cd30fd1c49bc01251d868cb5c5f07c88cec6350e92d0c7b332eda2a15f44a","ssdeep":"6144:QSi/iIT8ndB0rxAxFVPFe8lEkXCRQ6MD7iOuHXk+0OuHXk+w:CfxAxF7oQ6MD7O","tlshash":"e3a49e62f9c932685b2726f454fb6fc7332c003c995c4a91e0a2d47522c8ef617bb667","first_seen":"2026-08-31T18:47:19.051339Z","last_seen":"2026-08-31T18:47:19.051339Z","times_seen":1,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":481,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4iffg4/yD/l/de_DE-j/IGMQB7wzsGt.js","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.067Z","timestamp":1788201975067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/v4iffg4/yD/l/de_DE-j/IGMQB7wzsGt.js HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: application/x-javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Tue, 31 Aug 2027 18:46:15 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: mDqpgxz3gjEN+ngNo6zMZg==\r\nx-fb-debug: vs7ROLBzvtN6b7Cin7Ty2eHy0lv3UAHGNLF8UM/ndBn1HKMlUUZ66Le1Zk70icBcPL81L3pkZtMvRQxFlrUFwA==\r\ncontent-length: 47249\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=22, rtx=0, c=35, mss=1232, tbw=101017, tp=93, tpl=0, uplat=368, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":313000,"size_decoded":49243,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22092)","md5":"7e00e150e3fc79d483899bee312f3f9c","sha1":"137565b5d73f6baca684e86400d200f7d7dd483e","sha256":"f53759d888a72a9b980340535cd532ffd002193aa0c71f807fc9f3ca850aa97f","sha512":"b6001c8ea4d6383cbde62b85291d087096dd7cc1d3a69b2e3ef9e2c132410eadf4b577fae62bc16edf6725ef6462872a817d9925f9beb3380dd546c9b948acd8","ssdeep":"1536:a8kfoxcIzYf8QyydoDkOW64R4NuOpljqWOdIUbg7WAFYK0DuuAIMNlDhTuORqR+P:6pKMWAIUbg7WAFYK0D/AI4XqlC","tlshash":"b064dbaf9d42251f2016b52662b7558993ada80de34e5ed3f2c0d420db6cad80273fdf","first_seen":"2026-06-19T01:45:37.595817Z","last_seen":"2026-08-31T18:47:19.056278Z","times_seen":9,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":391,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v5/yE/l/0,cross/OZmECwlaENMg8T_6-Yirbb.css","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:15.069Z","timestamp":1788201975069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/v5/yE/l/0,cross/OZmECwlaENMg8T_6-Yirbb.css HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\nexpires: Tue, 31 Aug 2027 18:46:15 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\ncontent-md5: RZmNfPfLvevF3z/Vsg9rZw==\r\nx-fb-debug: eXpJtvAl8rfgX4p0T7xaieVTas/RBOayph0cBdU8DggxZ0QeBI0oHAUaa6q7CgcTUGJF8VkR/OuT4uCiUiES8Q==\r\ncontent-length: 32397\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=105, mss=1232, tbw=276377, tp=263, tpl=0, uplat=498, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":163237,"size_decoded":34377,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (43876)","md5":"6d53d17ce66f92d6ebd5236d0a6862ba","sha1":"bc89fe8c13163b0cba814cc61bdaa98c37419317","sha256":"aac3afb6697060bbd53434353a9b19008c81d60a0d0c6528260acb1faff5074d","sha512":"c23e9db731b1028f966c7adca60f6b24a51da74eb45ba675bcb8127166da7f827fa426180bd26a6eb7971a75949d85d39cf0dbce0036b731ece2faa234467557","ssdeep":"1536:P+kUrADH5umztmvUCbWJPgQpmsrTssvEhMZqD4npg7gqZNY1DpYMejgfvlxehoNy:P+kqmzUagevTs4cDMvl2","tlshash":"e3f320639741023d641f896a81b7fa48335e7c0afb4f77f2ea426458abcd3941a339c5","first_seen":"2026-05-08T00:58:31.036831Z","last_seen":"2026-08-31T18:47:19.059484Z","times_seen":278,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":520,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/y1/r/ay1hV6OlegS.ico","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"157.240.200.14","port":443,"asn":32934,"as":"FACEBOOK","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:16.024Z","timestamp":1788201976024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Tue, 08 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C7:4D:B8:F2:9C:53:2F:B4:B9:BD:62:6C:9B:73:A9:3D:FC:F1:34:2F","sha256":"73:BF:44:19:B4:84:56:5E:98:CA:5A:46:72:32:BF:B9:9F:0D:BD:6B:E2:F6:BE:83:EF:0E:A2:BA:4E:BA:71:D4"}}},"request":{"raw":"GET /rsrc.php/y1/r/ay1hV6OlegS.ico HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\ncontent-md5: to9qU1coA/wIRYVuZbprEQ==\r\nexpires: Sat, 28 Aug 2027 01:51:34 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\nx-fb-debug: +faEqcxCj8ZfJT8aiX9aHsoCLOFcVsiiQawzKhPouhHesc92bCh33keGIWSvatgHwW+/loSSwMyGEPNzxhNv6A==\r\ncontent-length: 20366\r\ndate: Mon, 31 Aug 2026 18:46:16 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=473, mss=1232, tbw=1200009, tp=1124, tpl=0, uplat=0, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20366,"size_decoded":22289,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b68f6a53572803fc0845856e65ba6b11","sha1":"4b8ae79b4874c5aa89acacf8667e94fce89dec65","sha256":"8924f44d76426a340b105cbdc5b93678c6b772e847b393f2568d94847c0d8d80","sha512":"9d194cba9e8225a66a520b614be53ab6e7020fd4a6ca7ceadd5d4f5b2a98ae8aa52af45a497633e2a59e57ca541a5f030d46db60f43cbe23e63bdc302e68e20e","ssdeep":"48:Xfq3OqXAzh4jaJV9HxG8LaSmO6IgbExw1Xw8JomVn+jwn7:CcwaJViU6IgbEy1AO+jwn7","tlshash":"5692245132430308f45d06b0c647b15a7bed7c832c675e67e9ab3a4e6ff825890275e3","first_seen":"2025-02-20T18:41:00.089582Z","last_seen":"2026-08-31T21:34:20.686793Z","times_seen":21488,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu.api.fpjs.io/DwmA/JNZ1Dz7/7?q=jNhKjoC5tAGKbq5q9QPm","fqdn":"eu.api.fpjs.io","domain":"fpjs.io","tld":"io"},"ip":{"addr":"75.2.52.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:18.884Z","timestamp":1788201978884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu.api.fpjs.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 29 Aug 2026 00:00:00 GMT","end":"Sun, 14 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"66:43:BE:95:F5:DD:EF:96:EA:7A:09:7C:C2:BC:2B:C6:92:57:EB:CA","sha256":"F6:F5:D6:47:3B:BB:E0:AC:E8:30:3C:41:62:1E:77:26:DA:D2:5E:05:F6:7C:0E:C2:71:C3:2D:AC:04:68:7F:29"}}},"request":{"raw":"GET /DwmA/JNZ1Dz7/7?q=jNhKjoC5tAGKbq5q9QPm HTTP/1.1\r\nHost: eu.api.fpjs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://flatsome.hsdtit.com/\r\nOrigin: https://flatsome.hsdtit.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 18:46:18 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 96\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Retry-After\r\ncache-control: max-age=31536000, immutable, private\r\ncontent-security-policy: default-src 'none'; frame-ancestors 'none'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: noindex\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96,"size_decoded":605,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ca050649ba6d18e59ae7208135da0778","sha1":"4549dea962bdc0d0c7290165b20e43c588b9d351","sha256":"c44d46b72e93ecb5ebb0c1ea04e379852f9aed0fe49882d0a77a037cc35fc688","sha512":"af381b905e12199bdb1dce1c6989898df4d09d8f0aec9ac1c675480dd2951de9f48fbb4f9a3e3dfefcdd29c3af7676fd93b03efa2d70384e3a920580dc3ef8c5","ssdeep":"","tlshash":"f6b0120dd02e8088319d18c42b6237400040aa282109b0495e1b9625c6739516cb56cd","first_seen":"2026-08-31T18:47:19.061737Z","last_seen":"2026-08-31T18:47:19.061737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":7,"connect":4,"send":0,"wait":24,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flatsome.hsdtit.com/id-review-page/login/css/OZmECwlaENMg8T_6-Yirbb.css","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"ip":{"addr":"103.200.23.159","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:13.851Z","timestamp":1788201973851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.flatsome.hsdtit.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 08:07:35 GMT","end":"Sat, 10 Oct 2026 08:07:34 GMT"},"fingerprint":{"sha1":"95:00:4E:C0:78:D7:CB:EE:E0:1A:C5:F7:17:58:13:A9:B8:61:57:50","sha256":"B5:E8:10:B3:B8:C3:48:16:2E:AE:0C:4F:36:B1:FA:DF:BF:11:09:EA:A0:28:21:FB:FE:14:6F:91:15:9F:F2:0F"}}},"request":{"raw":"GET /id-review-page/login/css/OZmECwlaENMg8T_6-Yirbb.css HTTP/1.1\r\nHost: flatsome.hsdtit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/id-review-page/login/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 07 Sep 2026 18:46:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 11 May 2026 07:30:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34163\r\ndate: Mon, 31 Aug 2026 18:46:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163237,"size_decoded":34493,"mime_type":"text/css","magic":"ASCII text, with very long lines (43876)","md5":"6d53d17ce66f92d6ebd5236d0a6862ba","sha1":"bc89fe8c13163b0cba814cc61bdaa98c37419317","sha256":"aac3afb6697060bbd53434353a9b19008c81d60a0d0c6528260acb1faff5074d","sha512":"c23e9db731b1028f966c7adca60f6b24a51da74eb45ba675bcb8127166da7f827fa426180bd26a6eb7971a75949d85d39cf0dbce0036b731ece2faa234467557","ssdeep":"1536:P+kUrADH5umztmvUCbWJPgQpmsrTssvEhMZqD4npg7gqZNY1DpYMejgfvlxehoNy:P+kqmzUagevTs4cDMvl2","tlshash":"e3f320639741023d641f896a81b7fa48335e7c0afb4f77f2ea426458abcd3941a339c5","first_seen":"2026-05-08T00:58:31.036831Z","last_seen":"2026-08-31T18:47:19.059484Z","times_seen":278,"resource_available":false,"data":null}},"time_used":935,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":935,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"flatsome.hsdtit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"flatsome.hsdtit.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"flatsome.hsdtit.com/rsrc.php/yQ/r/-pkMfchyeAZ.woff2","fqdn":"flatsome.hsdtit.com","domain":"hsdtit.com","tld":"com"},"ip":{"addr":"103.200.23.159","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://flatsome.hsdtit.com/id-review-page/login/","date":"2026-08-31T18:46:14.992Z","timestamp":1788201974992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.flatsome.hsdtit.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 08:07:35 GMT","end":"Sat, 10 Oct 2026 08:07:34 GMT"},"fingerprint":{"sha1":"95:00:4E:C0:78:D7:CB:EE:E0:1A:C5:F7:17:58:13:A9:B8:61:57:50","sha256":"B5:E8:10:B3:B8:C3:48:16:2E:AE:0C:4F:36:B1:FA:DF:BF:11:09:EA:A0:28:21:FB:FE:14:6F:91:15:9F:F2:0F"}}},"request":{"raw":"GET /rsrc.php/yQ/r/-pkMfchyeAZ.woff2 HTTP/1.1\r\nHost: flatsome.hsdtit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://flatsome.hsdtit.com/id-review-page/login/css/rkR9nETCCfCEkX3WI8UJzenJ_BbYUv0YNT9DWDYPz6DhfgQe914iiBfONMKn.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nx-powered-by: PHP/8.3.33\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://flatsome.hsdtit.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ndate: Mon, 31 Aug 2026 18:46:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:10.6.0","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":97125,"size_decoded":97466,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11703)","md5":"26abcec2280191d26e16f71b608a878f","sha1":"a41a93eef712a5edea6e27984837ed5be1b78b1e","sha256":"a3ff591a103073499ef3b59112aef61187d0c900288b747b8c7464522f8d9c2d","sha512":"43759c91969d6dfed5f497a536ec88cff952d0b52017d9b9bc2dd97204a450ba30130edca10c7a024bc75b48b046c5d42a64391292c95f24f50d849a6f3722cb","ssdeep":"1536:AFyp64AzamAgAz++DTjiyXBN/zdPLGrUnhESFdwXfqcdiUfRXjuoDPMplixGnt9o:AAU4AzBAgAz+lyPBFEXRxGnXJfADtyB6","tlshash":"4d93e8b38578103f938e92c79060f65df9e67111cf468171f3fe56acaf92e92252260d","first_seen":"2026-08-31T18:47:19.063382Z","last_seen":"2026-08-31T18:47:19.063382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"flatsome.hsdtit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"flatsome.hsdtit.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}}]}