{"report_id":"af5a7ef9-3f01-4bb7-a2f4-57178379b611","version":6,"status":"done","tags":[],"date":"2026-03-18T11:03:30Z","url":{"schema":"http","addr":"zoom-jcw.com","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":0,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"zoom-jcw.com/","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"title":"竞彩网-（中国）官方网站","dom":{"size":307156,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1027)","md5":"31410c05f6fb28085fda11647284d2d1","sha1":"031fd31357a794aa0f7f6b9f1c5d55e732b98317","sha256":"3c686dedf96b10877a64326d612c4014a2f6b419628db4e5db5bb66d0ac60f82","sha512":"d4ff2d42de515681a3a5391b7d20f0e085764ee00be32afdbdf5ebb38305793190f2648fc8390d889a88c18422a25a6ef31b701ab8448bb260d94657d9c693ee","ssdeep":"6144:y3/V02f7DuY2TSgTtsFrPxvWXhVr3OOPPRMOGbg73fPREGrON41OKsivXiZr+0f0:EV02f7DuY2TSgTtsFrPxvWXhVr3OOPP5","tlshash":"106455643a5a0c132077d7d9f9587ba823c5a30bc84a966036fd1e8cdfe6ef074462e5","dom_hash":"domhash80e60d97a6e1adfd34b881803baa8806","first_seen":"2026-03-18T11:03:47.267536Z","last_seen":"2026-03-18T11:03:47.267536Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zoom-jcw.com","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":0,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-22T11:03:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"9d1.pro","ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-18T11:03:38.361724Z","last_seen":"2026-03-18T11:03:38.361724Z","alert_count":0,"request_count":67,"received_data":8346782,"sent_data":41376,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":2,"received_data":34313,"sent_data":965,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":7,"received_data":205429,"sent_data":3822,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-15T22:23:30.202114Z","alert_count":0,"request_count":1,"received_data":229957,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zoom-jcw.com","ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-03-16","domain_rank":0,"first_seen":"2026-03-18T11:03:40.222649Z","last_seen":"2026-03-18T11:03:40.222649Z","alert_count":0,"request_count":44,"received_data":2158982,"sent_data":21057,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/isotope.pkgd.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"346ff983b45d55144d662dc9f9bc3248","sha1":"6cb300d4a5067d7ceb71a9f5d477199a039d5b61","sha256":"7b3c21955dc6870eac447e3b6f2704462b1e20ac14a93c1015034747ae0833fb","sha512":"31c0450b3f88e08915af28017c596018ec9b02cf4d8b648cffbfbd479b5327a32f7f303a91802fa44142b9d52ef78b6e91ff43e230864470be9bd56942189a85","ssdeep":"768:PAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfyTSvDz231Fxk:/xVKDSfJP4Nnmc6FuCshD6cD6ZaTODzZ","tlshash":"7ef2c84f73403924468bf166966f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","size":35440,"data":"","first_seen":"2023-03-08T07:23:26Z","last_seen":"2026-07-20T08:28:12.911994Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/main.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b7dd0699fe475fc2787494ddae7540b","sha1":"9c7effb2ff1eede4b969c5548cc5a0db85488ff3","sha256":"dca50a257a3218a9d48a050e8c18e3589cad6b6f10e92f154e7eb41539b5933c","sha512":"ec2915edad25847fd4df0d8eb989701b4d7f4c669d196da835106a7da8ae5c5a266762d401b84337beaa0ce18d3ae0998c83f2db832fba3e60ed4580016f655f","ssdeep":"192:76A0K0SJR7g/WvW3NImPW85mmEJ1zk2PLE+NE+rJkE+NE+rJWE+NE+TZbJpE+NE5:WROJWKBNBKBNBcBNBNBNBSBNBRBNBc0b","tlshash":"1592aa0adc1640ba087fe37edd66d20aeb97932302458693bafc55480f7015662ddefc","size":21023,"data":"","first_seen":"2025-09-06T12:34:42.227435Z","last_seen":"2026-06-29T08:36:52.814724Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b34e5f57b4122379fd5ce55209b0872","sha1":"1a2095009f54fc9c9553509f9862501c41571ed4","sha256":"938461146994a57cf9c7ef941b7729298eb98841f69556d6adde9c5378ceee46","sha512":"9286cb5667a68691966b56d704bec3ef89e86deba74309820d8a82fd321d7ec397b3b7ffa91b145707e747293a5047420ab39d712415f7648074c767e91e30b4","ssdeep":"","tlshash":"81310f78566aa43036aba0282b3fe9413c90b01fb048d909fd8ee9048f18d5e4497afd","size":1532,"data":"","first_seen":"2026-03-18T11:03:47.405177Z","last_seen":"2026-03-18T11:50:35.166879Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/26.f6e287740e4ea85419e7.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8509081d1f15763bfa64c030256b28e0","sha1":"67fc60f366eaace7b9b1367938403772e0521060","sha256":"9bc47472a18fa13dc585be8a485da9f9a3c8b032e66e92012daab999f0a5c2aa","sha512":"a01fd031e9043ef769caaced1a7afcca9e41ff698823ebd1e2dc5b1fc1158e0f107ac5cba9a2c68885dcc4d8e80f459172c57e591b235d8cb528246253405525","ssdeep":"384:4QnJSWtxrxbuf07JMo+yTXLjzJa5GytPImE2WMtlfK4UFEzw/FlJcXOzSez7bdpW:4YtpHjSiNEkRj2D1111911V","tlshash":"a91385aea04355784d234e6617fb977cb2b51bf3442509a2b73fdc824bc8938178e26d","size":43844,"data":"","first_seen":"2026-03-18T11:03:47.379821Z","last_seen":"2026-03-18T11:50:35.129275Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=%27G-WY45Q7VQXC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0d1f10c2a97461f4f5e7520fb9fc6a2","sha1":"b4ae427688a43e81c7eee494a7d685beebf85f22","sha256":"a996cb1fe2df71a5d4d26dcb76f90edac6e30702190ee6e2fdf9e1c7bfa475ce","sha512":"bb773dd8811c4ed909ebd3f78ba904ce2af2374db1b3c63108b96cda3e8d8e95aab0a923b17c1512b9d19d3b3642e241419a68d48ea370f2f85858f510f0fd38","ssdeep":"3072:OeKcxFDs95m0N9bjRP/E1oFwtgLG9Qjp2oFaxaXv5ZwGwEeVDsFiRzF:5jDe72FWgn8Xv5ZFwEeVDs+F","tlshash":"16243accb7da70664393a5b8503f004bb27a7992f84cc894f192d8c46e746aa5273f7d","size":229308,"data":"","first_seen":"2026-03-18T11:03:47.337073Z","last_seen":"2026-03-18T11:50:35.186294Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/imagesloaded.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b06d700e10940dbe0cbf9279791510c6","sha1":"326eba2a41c7d9a0e772362cdf1a25bacc766bf5","sha256":"fc0788b902f4a65e59531b2ec49e699a745da16746365500733e919b556c9f9c","sha512":"eafd881a405d6bdc1a5acf49297d515f9c8a87218f69797ac4a6be7d5e5710b2b4566060dc2acfc8c0a294926ced6f4f27362d061d457c4780801af452acb79c","ssdeep":"96:cww1xr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBVU:cwwfrycrr3rKvE9IjRxjGjgNhdTLo3rk","tlshash":"43c122cd77a275362296f0b3a21f020f7276406e6918815d7969ecf25cfcd092633bb0","size":5602,"data":"","first_seen":"2023-03-08T07:23:26Z","last_seen":"2026-08-07T16:36:53.636749Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/jquery.inview.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4edba1c65592e5e64d420fe20104eb79","sha1":"a0e2be2157e43e2dae20e43d08af042151dd75d3","sha256":"423e09ae1666148e2718bd7aacfb05d17888e0554eb51fc343ef4317ef7d3b62","sha512":"d02491ef9bfac2839800067fd258adabdd6e36ab53de020f59b4fd82950cf922c32ae0771ccdee813a668c66a35e5f5183a8edd506d6efd89dbb44ea73a9ca72","ssdeep":"","tlshash":"3d21e0297301302ed0df64e3b1ae1d091863a237d302a8d5953ad8d9167c47835afa9d","size":1264,"data":"","first_seen":"2023-03-07T01:02:52Z","last_seen":"2026-08-09T09:15:19.81814Z","times_seen":596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/host1002.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"459fb0e73f13b903624b6575aa60f19e","sha1":"b7e12d188f6f304f072f3dcf9a4682b3d95c0c1c","sha256":"c7c9313039f59e4cdbc2ee408bd8af0868052e6dcd367d507b29cfc6b1483cbf","sha512":"3fae179cec6f787efafd76e40eab74f57171949168ca435a2b704fcb81e6873516b06e71606e649395b641d1fef9c4939a092f3578313fb4a6c9774ff8344d49","ssdeep":"192:H4Xv065altoBdjPg1fVC+hIR4Q5JEtQ+UUccKKSeeaaiDpFFRvvbbX5jbfjjXX5n:qv09Ad4Q5wQ0f6VGizX0j/SEzTV","tlshash":"8e6218a9f44d0ac6626e7e3cd0ee69a45a1da1b2e2335533c853bd710897243b370d3e","size":15952,"data":"","first_seen":"2025-11-23T08:36:53.370816Z","last_seen":"2026-07-12T09:42:40.914341Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/#/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b34e5f57b4122379fd5ce55209b0872","sha1":"1a2095009f54fc9c9553509f9862501c41571ed4","sha256":"938461146994a57cf9c7ef941b7729298eb98841f69556d6adde9c5378ceee46","sha512":"9286cb5667a68691966b56d704bec3ef89e86deba74309820d8a82fd321d7ec397b3b7ffa91b145707e747293a5047420ab39d712415f7648074c767e91e30b4","ssdeep":"","tlshash":"81310f78566aa43036aba0282b3fe9413c90b01fb048d909fd8ee9048f18d5e4497afd","size":1532,"data":"","first_seen":"2026-03-18T11:03:47.405177Z","last_seen":"2026-03-18T11:50:35.166879Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/webSdk.produce.min.3.3.5.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6bc23178310ba67f36a591b9dd5bcbb","sha1":"8a5e9002764f9c2f60a4f3bb8259455bad0874f0","sha256":"0540037cbf821c47ec2724c7aa3957069ba61482c8bd7013b325410a5ad2ba58","sha512":"53f852d6550ddfbc95e84e55097479644a9ededc607b06022e3894dbb1952693f95704d13592319ea4918c269285eb07409568e79b2d260c96a07925ac6e271a","ssdeep":"1536:rZSxL4lC4Ui/jdRVEBiZ4BPPJPkiN/CSEUGMl:QZb4H/ZRqBvJ/N/C5Ml","tlshash":"1d835ccdbac9753403e7a965d27b101173362411d9058228f2ece8e6bc3e5cb6167fba","size":83197,"data":"","first_seen":"2026-03-18T11:03:47.378267Z","last_seen":"2026-08-06T04:45:29.607821Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/2.672a1162769c57913824.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4efc9ed46e06ab4594531830f769621e","sha1":"cddee92b894288ebb1b8630136566cb78bb047cd","sha256":"c6e3a1c9cf8f9d1c038abe117b50b8bf6912c5f093bdd3312f5ce20d6522810b","sha512":"f5e0e97d52cb31122b634aba4075bb7fcffd397cc22b68a72542fc5191b1989b6f47a8cc21556f9804f68ae32e3962818badd5b49d5215145a11487c71bc27b4","ssdeep":"12288:i7ko7IW+z5dpnOib888GuiKa97r42kNUbb2VclKR2X0HeAggd6j0o6E9ILBqM2VB:i7ko7IW+z5dpnOib888GuiKa97r42kNo","tlshash":"5cf4e7de3a0a042a9433ef7a3be5373812a96753c425195537ceac83cf1a7f021597ad","size":768570,"data":"","first_seen":"2026-03-18T11:03:47.335719Z","last_seen":"2026-03-18T11:50:35.114533Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/26.f6e287740e4ea85419e7.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8509081d1f15763bfa64c030256b28e0","sha1":"67fc60f366eaace7b9b1367938403772e0521060","sha256":"9bc47472a18fa13dc585be8a485da9f9a3c8b032e66e92012daab999f0a5c2aa","sha512":"a01fd031e9043ef769caaced1a7afcca9e41ff698823ebd1e2dc5b1fc1158e0f107ac5cba9a2c68885dcc4d8e80f459172c57e591b235d8cb528246253405525","ssdeep":"384:4QnJSWtxrxbuf07JMo+yTXLjzJa5GytPImE2WMtlfK4UFEzw/FlJcXOzSez7bdpW:4YtpHjSiNEkRj2D1111911V","tlshash":"a91385aea04355784d234e6617fb977cb2b51bf3442509a2b73fdc824bc8938178e26d","size":43844,"data":"","first_seen":"2026-03-18T11:03:47.379821Z","last_seen":"2026-03-18T11:50:35.129275Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=%27G-WY45Q7VQXC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0d1f10c2a97461f4f5e7520fb9fc6a2","sha1":"b4ae427688a43e81c7eee494a7d685beebf85f22","sha256":"a996cb1fe2df71a5d4d26dcb76f90edac6e30702190ee6e2fdf9e1c7bfa475ce","sha512":"bb773dd8811c4ed909ebd3f78ba904ce2af2374db1b3c63108b96cda3e8d8e95aab0a923b17c1512b9d19d3b3642e241419a68d48ea370f2f85858f510f0fd38","ssdeep":"3072:OeKcxFDs95m0N9bjRP/E1oFwtgLG9Qjp2oFaxaXv5ZwGwEeVDsFiRzF:5jDe72FWgn8Xv5ZFwEeVDs+F","tlshash":"16243accb7da70664393a5b8503f004bb27a7992f84cc894f192d8c46e746aa5273f7d","size":229308,"data":"","first_seen":"2026-03-18T11:03:47.337073Z","last_seen":"2026-03-18T11:50:35.186294Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/webSdk.produce.min.3.3.5.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6bc23178310ba67f36a591b9dd5bcbb","sha1":"8a5e9002764f9c2f60a4f3bb8259455bad0874f0","sha256":"0540037cbf821c47ec2724c7aa3957069ba61482c8bd7013b325410a5ad2ba58","sha512":"53f852d6550ddfbc95e84e55097479644a9ededc607b06022e3894dbb1952693f95704d13592319ea4918c269285eb07409568e79b2d260c96a07925ac6e271a","ssdeep":"1536:rZSxL4lC4Ui/jdRVEBiZ4BPPJPkiN/CSEUGMl:QZb4H/ZRqBvJ/N/C5Ml","tlshash":"1d835ccdbac9753403e7a965d27b101173362411d9058228f2ece8e6bc3e5cb6167fba","size":83197,"data":"","first_seen":"2026-03-18T11:03:47.378267Z","last_seen":"2026-08-06T04:45:29.607821Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/app.553e32f2bc923bd0f9ce.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0282c141c1617d801b45aee006d584e9","sha1":"936fc0553b348f75e40fbf81b465fc853fe3616d","sha256":"5242f6e892783d11b9b8120e81fa7f8eb8c7d76d0a859faf80bf42fd5c03c0ae","sha512":"5171782c86a5544432bc6d1384db7bfc3680d3a118521917be87f9e4e86eece8112fcc4298c300146d9befa56eb640d7ae054a6c24d545eb94bea39ec452a93b","ssdeep":"12288:73ySxA7p5709pbo9IsKopCfploYq/9AUlHU3B9B1IfseVKVofekXbrm4K8cZ9x4r:DlTveVK4qtWhSmfVHXBuUs/KelUttP1","tlshash":"0a958d3eb389717c0a512211340f35356cb83ea7e54a80d1baacd5d627e4e58922ffbd","size":1936222,"data":"","first_seen":"2026-03-18T11:03:47.407447Z","last_seen":"2026-03-18T11:50:35.168103Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/2.672a1162769c57913824.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4efc9ed46e06ab4594531830f769621e","sha1":"cddee92b894288ebb1b8630136566cb78bb047cd","sha256":"c6e3a1c9cf8f9d1c038abe117b50b8bf6912c5f093bdd3312f5ce20d6522810b","sha512":"f5e0e97d52cb31122b634aba4075bb7fcffd397cc22b68a72542fc5191b1989b6f47a8cc21556f9804f68ae32e3962818badd5b49d5215145a11487c71bc27b4","ssdeep":"12288:i7ko7IW+z5dpnOib888GuiKa97r42kNUbb2VclKR2X0HeAggd6j0o6E9ILBqM2VB:i7ko7IW+z5dpnOib888GuiKa97r42kNo","tlshash":"5cf4e7de3a0a042a9433ef7a3be5373812a96753c425195537ceac83cf1a7f021597ad","size":768570,"data":"","first_seen":"2026-03-18T11:03:47.335719Z","last_seen":"2026-03-18T11:50:35.114533Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/#/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"Function","is_inline":false,"md5":"fcaea4b8885ca5c1fb3ddd5c490da5c6","sha1":"35745f87b37210d992a9ed534a593ae500b7adaa","sha256":"934c2008743c36db746a9d6ebd9f1b84ff11477edc55fbf7b599bbfa687f7272","sha512":"65e3bda5b8bd909b2fed0a25e3d6d3d7d2984601de4a906783c783097fcd8902ea1c2fa05d33619126415bc5000a72e8459eb81c971a85e2ddb374f9fd9231aa","ssdeep":"","tlshash":"889002c520d965518ad321a061261a46615a04f914a48c5091589c56287303092695bc","size":54,"data":"","first_seen":"2023-04-12T08:25:39Z","last_seen":"2026-08-10T00:01:51.331436Z","times_seen":26103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/manifest.f1d323b5ea7fb2a5284f.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3b88065b9b1c2f63cd335d38ba346e3","sha1":"d6391b1bbc52f45e45c88263f5fd354c41a51f52","sha256":"166c559da6d0d2f304389ce10e16f723a6624da53db03189b4351ef0c59f12cf","sha512":"e31239d621ce9b5c043c0a79a3ac7c09e54b668af07ca1309e26ef715a326ecaf7f599ef864aa2cd4f940e05f75c8f95235fb26ad7cbf57667982b9469f397ba","ssdeep":"","tlshash":"7b5109ee37b9f1d457721a85113bc834f23d39202d48dcca83a8e2af6d35ee451a1976","size":3171,"data":"","first_seen":"2026-03-18T11:03:47.316987Z","last_seen":"2026-03-18T11:50:35.148959Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/tag.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"82bf7c6da65af90fbe37e26c5ef25a58","sha1":"866520238607474cfa7cb79775ab961720221a7c","sha256":"7098d573321c71fec0d44ebb7a1378596820e3a86d95fd20077fcda2a75da5e5","sha512":"4f422abc5b8a136fc805e9a5fa2b1ca3c4325b5e4ec8dca1f35621008d82337dbc28e20da5d235139013f7f861e6722b4e47e33bde8b021b1bb5708bf2466b56","ssdeep":"96:ZL9wIfDBXfAWbasRhlj0luz6ao57H4AQYJLtyw6HywgumPZVZ0jqlhxFLpNfeQuz:gaI6LRh90luz6ZVHNQYJLt7b7umPZVZo","tlshash":"e1c1a6e90e67a82166f7606b4f3fb118302700279485d4057ecdda442f94b994a7efdf","size":5810,"data":"","first_seen":"2026-03-18T11:03:47.372953Z","last_seen":"2026-03-18T11:50:35.056085Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f4c9359bd4b3b2032207c29caf2c66b","sha1":"3440357d31da2df2137cd51dc09b14b698972590","sha256":"369f83be7b154a444680ddc7ea72b0fa3b474121dc0c0c52c18379cf9e541457","sha512":"b43dcce0937093abbd795c8f5c14a2fd51577ba6fd44c17891eafd46e3d4b0da52c56b8a1904770496a46f7cadfd4e8a48edad26b7e9f61ca66c058b14343406","ssdeep":"","tlshash":"f931ca7d27a211b2954398ae3fa603d03d3975278288d9417c3de1d9efe0e428961ff4","size":1465,"data":"","first_seen":"2026-03-18T11:03:47.409562Z","last_seen":"2026-03-18T11:50:35.17288Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/tag.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"82bf7c6da65af90fbe37e26c5ef25a58","sha1":"866520238607474cfa7cb79775ab961720221a7c","sha256":"7098d573321c71fec0d44ebb7a1378596820e3a86d95fd20077fcda2a75da5e5","sha512":"4f422abc5b8a136fc805e9a5fa2b1ca3c4325b5e4ec8dca1f35621008d82337dbc28e20da5d235139013f7f861e6722b4e47e33bde8b021b1bb5708bf2466b56","ssdeep":"96:ZL9wIfDBXfAWbasRhlj0luz6ao57H4AQYJLtyw6HywgumPZVZ0jqlhxFLpNfeQuz:gaI6LRh90luz6ZVHNQYJLt7b7umPZVZo","tlshash":"e1c1a6e90e67a82166f7606b4f3fb118302700279485d4057ecdda442f94b994a7efdf","size":5810,"data":"","first_seen":"2026-03-18T11:03:47.372953Z","last_seen":"2026-03-18T11:50:35.056085Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/#/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f4c9359bd4b3b2032207c29caf2c66b","sha1":"3440357d31da2df2137cd51dc09b14b698972590","sha256":"369f83be7b154a444680ddc7ea72b0fa3b474121dc0c0c52c18379cf9e541457","sha512":"b43dcce0937093abbd795c8f5c14a2fd51577ba6fd44c17891eafd46e3d4b0da52c56b8a1904770496a46f7cadfd4e8a48edad26b7e9f61ca66c058b14343406","ssdeep":"","tlshash":"f931ca7d27a211b2954398ae3fa603d03d3975278288d9417c3de1d9efe0e428961ff4","size":1465,"data":"","first_seen":"2026-03-18T11:03:47.409562Z","last_seen":"2026-03-18T11:50:35.17288Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/app.553e32f2bc923bd0f9ce.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0282c141c1617d801b45aee006d584e9","sha1":"936fc0553b348f75e40fbf81b465fc853fe3616d","sha256":"5242f6e892783d11b9b8120e81fa7f8eb8c7d76d0a859faf80bf42fd5c03c0ae","sha512":"5171782c86a5544432bc6d1384db7bfc3680d3a118521917be87f9e4e86eece8112fcc4298c300146d9befa56eb640d7ae054a6c24d545eb94bea39ec452a93b","ssdeep":"12288:73ySxA7p5709pbo9IsKopCfploYq/9AUlHU3B9B1IfseVKVofekXbrm4K8cZ9x4r:DlTveVK4qtWhSmfVHXBuUs/KelUttP1","tlshash":"0a958d3eb389717c0a512211340f35356cb83ea7e54a80d1baacd5d627e4e58922ffbd","size":1936222,"data":"","first_seen":"2026-03-18T11:03:47.407447Z","last_seen":"2026-03-18T11:50:35.168103Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/0.dd128be9313d67725825.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ef08aa91899f0c2e18a6e391d6be428","sha1":"63c4d60c860b78332c9729000d502d05dcb32999","sha256":"4cfce93e499a6434609e5c289794ef60fb04894d8b34e7b91c410d6637ec3aa0","sha512":"5f71b70f2a28c9fa0da326ec1e59dab620fd2efcac7974521af669b4b807860ba5e22bb9fb28563a29db26eb4c03a7d1d048779c5b8ee5d4f316ef45f92893ec","ssdeep":"12288:cTkrSg07HeJItqwOACRLwiWppjpruknaQIV:cY907HemRO/RLtW7pKUaQ6","tlshash":"a7255db43291606a07eaa0d7402f1b01ae7d5e2b640dc0acf62dedd72eb4b05e57b774","size":1009820,"data":"","first_seen":"2026-03-18T11:03:47.327455Z","last_seen":"2026-03-18T11:50:35.093325Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/slick.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-10T00:54:33.607886Z","times_seen":110837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/popper.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c055b8c12988ec2b1f7238d85e79f4b4","sha1":"5958a52438c8d753d692b11b5419bd1490c2655b","sha256":"58cb6a78afc204b7165e947c965cbce6296ee0e587fbab3e12c0d2b6378e9004","sha512":"b8fce0655dc9e77b23efdcec09eba16234eb2e59067b182ada5d01d75fee0f0c02f423063d47720a928a58d2edcd61582ad0c70bfeda75b7d4a2f4387970f848","ssdeep":"384:fYhLSLf4UzgCyKnxRsyPMbOXrEQAkxHOxvqAQD75zfS5vIXm3YzGp/ARdOgHhgzX:ILSLAUzgCpRMbcxHOxvwD7pS5vezy/Ac","tlshash":"8292b3dc3294b0a647ab91a7a07f960eb2335875610e9410f19df2d97c30ef9a13bc79","size":20537,"data":"","first_seen":"2023-03-07T23:52:11Z","last_seen":"2026-07-26T04:22:17.669522Z","times_seen":757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/onresizeRem.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2582d19f3d21f07913c1116075b0e3a","sha1":"6cd2f78b49680c4f750a632dc104116b3ba9a998","sha256":"9a83d7f070b1ff3b7d83bc1114cd8b760582c8aabf864d5ad899a084786c1c79","sha512":"8e3823d064ab863820766a7aaf369421d5fb73539a0f63f1a40bab4c3a69a2808f748a37286a5ea4e3581346c5b1159955fe43cb8c4714d351981019406a7c6a","ssdeep":"","tlshash":"cf21cdbc2be6143142236464397fe3c43d764017654b6646b96c8fc98ff0e818a62df8","size":1432,"data":"","first_seen":"2025-10-05T08:20:38.62442Z","last_seen":"2026-07-12T09:42:40.888151Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/manifest.f1d323b5ea7fb2a5284f.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3b88065b9b1c2f63cd335d38ba346e3","sha1":"d6391b1bbc52f45e45c88263f5fd354c41a51f52","sha256":"166c559da6d0d2f304389ce10e16f723a6624da53db03189b4351ef0c59f12cf","sha512":"e31239d621ce9b5c043c0a79a3ac7c09e54b668af07ca1309e26ef715a326ecaf7f599ef864aa2cd4f940e05f75c8f95235fb26ad7cbf57667982b9469f397ba","ssdeep":"","tlshash":"7b5109ee37b9f1d457721a85113bc834f23d39202d48dcca83a8e2af6d35ee451a1976","size":3171,"data":"","first_seen":"2026-03-18T11:03:47.316987Z","last_seen":"2026-03-18T11:50:35.148959Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/#/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"Function","is_inline":false,"md5":"fcaea4b8885ca5c1fb3ddd5c490da5c6","sha1":"35745f87b37210d992a9ed534a593ae500b7adaa","sha256":"934c2008743c36db746a9d6ebd9f1b84ff11477edc55fbf7b599bbfa687f7272","sha512":"65e3bda5b8bd909b2fed0a25e3d6d3d7d2984601de4a906783c783097fcd8902ea1c2fa05d33619126415bc5000a72e8459eb81c971a85e2ddb374f9fd9231aa","ssdeep":"","tlshash":"889002c520d965518ad321a061261a46615a04f914a48c5091589c56287303092695bc","size":54,"data":"","first_seen":"2023-04-12T08:25:39Z","last_seen":"2026-08-10T00:01:51.331436Z","times_seen":26103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/vendor.812e883b1b860447096d.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cd7ae6a7d7eca4078aa3f45fc5e4768","sha1":"a0b663cf3bd1c9211a4cce464f618d3f53ecccec","sha256":"7de489d20f0e5f315ac16a75610d795a4da40ce541a0afe0cfcfa90e5589ecd1","sha512":"27227e440750347ada7a2509e5537f1bc4214c0fca4465fcb9290e543130ebd7664ee26562f0d90633744fb5ecc3ff9eb8f27a163a1f184647a6d3feaf7ea3bd","ssdeep":"49152:NzmGOp53FPEffGV6pKrPr4e+wC/0al56ZwUW:O6s6wgT56ZE","tlshash":"81a5f989b291b02147e765a0002f110bf23a795d780a80acf679e8ea7dbd94d517ff3d","size":2246224,"data":"","first_seen":"2026-03-18T11:03:47.411636Z","last_seen":"2026-03-18T11:50:35.171915Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/host1002.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"459fb0e73f13b903624b6575aa60f19e","sha1":"b7e12d188f6f304f072f3dcf9a4682b3d95c0c1c","sha256":"c7c9313039f59e4cdbc2ee408bd8af0868052e6dcd367d507b29cfc6b1483cbf","sha512":"3fae179cec6f787efafd76e40eab74f57171949168ca435a2b704fcb81e6873516b06e71606e649395b641d1fef9c4939a092f3578313fb4a6c9774ff8344d49","ssdeep":"192:H4Xv065altoBdjPg1fVC+hIR4Q5JEtQ+UUccKKSeeaaiDpFFRvvbbX5jbfjjXX5n:qv09Ad4Q5wQ0f6VGizX0j/SEzTV","tlshash":"8e6218a9f44d0ac6626e7e3cd0ee69a45a1da1b2e2335533c853bd710897243b370d3e","size":15952,"data":"","first_seen":"2025-11-23T08:36:53.370816Z","last_seen":"2026-07-12T09:42:40.914341Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/maigewan.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"69bdf52a1ecd210da01ee35731f29cad","sha1":"cfecdf752f8115fadcf2409fbbb362f15eb90276","sha256":"e649b133500fff6d6f8ce83767de94d2840ecf375529ca910ba7bd5ce375367f","sha512":"cd86c4bb3ac49ef66b059621839d0b22de308ddc648d46a0dbfe4184863d84e47931bc7e183ad3457a46f32792c3396e69f9c0a385e501f49b697eb29cb2e5f2","ssdeep":"","tlshash":"08e026bf093710348262e09e31aaa6483af8a01ab612403a94bc84968dd8d9518f678e","size":337,"data":"","first_seen":"2026-03-18T11:03:47.377092Z","last_seen":"2026-05-11T04:30:59.236776Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/bootstrap.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9075742ee1fe2d0c1d47a431fda233e4","sha1":"1ed20f32fb45b9c9cd1fc1b7c58f422f9d0375c0","sha256":"e184f406380108ed797bf9d0eebd49b314d360f89882aee36ae771924a412e7d","sha512":"c5830538a6e3471bde73e49f27ddc7135ba7316f0f2cc1a48a4a8eb965f4387286643641586b662eefe74f1beb15ca89a854d77e043aff5d4a48d4c44a4a64b1","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGm:5NTKktDLmTF8yJL45XtHjoGm","tlshash":"9d43c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","size":58073,"data":"","first_seen":"2023-03-07T12:10:45Z","last_seen":"2026-08-08T17:39:45.640662Z","times_seen":985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/jquery.validate.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"161437e6bba9f0eb5288c1772697125a","sha1":"50c48978230c9ae8bff251475e899f4c60bdc2eb","sha256":"f1db7f1a0de6de70db59c069c2ab3058138a602cc2fdd16a6be72645b6dff031","sha512":"fd71c25d4cb106ff75d8f50f279108932099b42d189d8c40eb2c8f385d38cb6d189c5fbdd5fcf4713c6e517799250b67de9729639992658cae6133414375c908","ssdeep":"384:Q69rHpoLFWB6/tX2lHJdkMiYnFpg5SLwaE2fSNAc0Eny+RWuK7NeB2wV/vtrx+OE:+WB6/8lHJdkMioFpg5SUB2yQEny+NNxO","tlshash":"80b2b78976d671065e9720f4509ba60761b669a0e008e83cb5b8d4d2bef4fcc50f7f78","size":24378,"data":"","first_seen":"2023-04-06T10:18:41Z","last_seen":"2026-08-07T14:48:11.566562Z","times_seen":401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/0.dd128be9313d67725825.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ef08aa91899f0c2e18a6e391d6be428","sha1":"63c4d60c860b78332c9729000d502d05dcb32999","sha256":"4cfce93e499a6434609e5c289794ef60fb04894d8b34e7b91c410d6637ec3aa0","sha512":"5f71b70f2a28c9fa0da326ec1e59dab620fd2efcac7974521af669b4b807860ba5e22bb9fb28563a29db26eb4c03a7d1d048779c5b8ee5d4f316ef45f92893ec","ssdeep":"12288:cTkrSg07HeJItqwOACRLwiWppjpruknaQIV:cY907HemRO/RLtW7pKUaQ6","tlshash":"a7255db43291606a07eaa0d7402f1b01ae7d5e2b640dc0acf62dedd72eb4b05e57b774","size":1009820,"data":"","first_seen":"2026-03-18T11:03:47.327455Z","last_seen":"2026-03-18T11:50:35.093325Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/vendor.812e883b1b860447096d.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cd7ae6a7d7eca4078aa3f45fc5e4768","sha1":"a0b663cf3bd1c9211a4cce464f618d3f53ecccec","sha256":"7de489d20f0e5f315ac16a75610d795a4da40ce541a0afe0cfcfa90e5589ecd1","sha512":"27227e440750347ada7a2509e5537f1bc4214c0fca4465fcb9290e543130ebd7664ee26562f0d90633744fb5ecc3ff9eb8f27a163a1f184647a6d3feaf7ea3bd","ssdeep":"49152:NzmGOp53FPEffGV6pKrPr4e+wC/0al56ZwUW:O6s6wgT56ZE","tlshash":"81a5f989b291b02147e765a0002f110bf23a795d780a80acf679e8ea7dbd94d517ff3d","size":2246224,"data":"","first_seen":"2026-03-18T11:03:47.411636Z","last_seen":"2026-03-18T11:50:35.171915Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/jquery-3.4.1.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88147,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-08-09T18:21:44.236862Z","times_seen":5620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/jquery.counterup.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2f018bca05c968415b20bc5dd61a8f8","sha1":"bb4243175d220a4bbdc9496bd06e17fe4bae51dd","sha256":"b20d59628a6e82bfe3d22e811157674b5a5b76cd58a87604e107ee4a6979023a","sha512":"8f6f8730b07041aaf4b02d13a9ff1d3d1456ae3deee144b95e77b4bad2dc354589ba57213977340b59293ddc3078a697249c477a8379b96e892a1d5c039d8699","ssdeep":"","tlshash":"6b718945b75f222159bb23e89f1b554cb73993360447024879ad92c05f72838e6dafbc","size":3681,"data":"","first_seen":"2023-08-06T14:03:54Z","last_seen":"2026-07-18T10:12:08.495397Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/jquery.magnific-popup.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-09T23:12:36.355329Z","times_seen":24795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/ion.rangeSlider.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd2250b414858d83d5bff500e9c418d8","sha1":"e6efd1a460c2f6c5d94924079e0f2029b46272cb","sha256":"54a80c57a4102dcfca059ae31110176b10e52706b4dc15bb6a621f38909ea64b","sha512":"9c62296d01ad3950f578684e42d5e9b20cf3201e785e111c29ec0bb99909a6366c64fd0e94bec85574663bd06432b0bf71db32313cf38f73df399c614871661d","ssdeep":"384:Ls4TfGuknYrmL1+y3y2yVRRV7Ry2ySx76gVMu9FdopOyqKy+gyIpKQPmchIUUe8a:w4TKQObixPRix076gVMAAESuPqUUe8a","tlshash":"a3033e962265b7410552d1e4240d0b4f5b33b26ea72380bc7dbddbdb4caad6870be738","size":41170,"data":"","first_seen":"2023-04-05T23:55:04Z","last_seen":"2026-08-09T18:12:06.262045Z","times_seen":15888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/onresizeRem.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2582d19f3d21f07913c1116075b0e3a","sha1":"6cd2f78b49680c4f750a632dc104116b3ba9a998","sha256":"9a83d7f070b1ff3b7d83bc1114cd8b760582c8aabf864d5ad899a084786c1c79","sha512":"8e3823d064ab863820766a7aaf369421d5fb73539a0f63f1a40bab4c3a69a2808f748a37286a5ea4e3581346c5b1159955fe43cb8c4714d351981019406a7c6a","ssdeep":"","tlshash":"cf21cdbc2be6143142236464397fe3c43d764017654b6646b96c8fc98ff0e818a62df8","size":1432,"data":"","first_seen":"2025-10-05T08:20:38.62442Z","last_seen":"2026-07-12T09:42:40.888151Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fcf348ccae06144c80b056594fcad25a","sha1":"91af32217ba3270a7f822067e2cd20f633e9f376","sha256":"7c45d61b81d68e0b3a6ed37712b162ab22300439850373bb00b0b14611219807","sha512":"5c72236e96b051c4965411e08b9509b662ac563427655162eb8116328cafdf184891916a27b2c178a944049fecccf09c9d3c9d33712e95e0daa4e8092686a767","ssdeep":"","tlshash":"2a900212a204391565a495142505a854455cd51151041596a544d1994c92ad041a3635","size":52,"data":"","first_seen":"2025-09-26T16:19:50.888217Z","last_seen":"2026-06-04T17:44:33.139598Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/home-1/350x350-2.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/home-1/350x350-2.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac08-8165\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33125,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x281, components 3","md5":"60ef5d4aa8164cc0f6ecaa360dcb46a5","sha1":"5edf820dcabb7e2169347fa46795db39795e2daf","sha256":"b23452a001dbb6b0a57b188ec338d15f45dfe50df543d00e89cdb8990700187a","sha512":"6076b0f10a9659d9acdab7e526da1bb66911c8f01ef1b95b43058b8b7a6abf311f44db56f708bfc811cf8a31eed65d919c78bb626c55a2c088a56114d6996bd1","ssdeep":"768:hzBoHtSict7i7BB15YEIYI0ThzM/bcfopixV6WFhsNLHqbZ3NCr61:hFi7bYEIKThzSVpiFkHqbZ9Cr61","tlshash":"79e2d026f186cdfa71718394632a9ecd1a969b391d1c0b0113dcf8f1d6d2ac38ac1786","first_seen":"2026-03-18T11:03:47.268975Z","last_seen":"2026-03-18T11:49:34.37265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/jquery.counterup.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/js/plugins/jquery.counterup.min.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-e61\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3681,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e2f018bca05c968415b20bc5dd61a8f8","sha1":"bb4243175d220a4bbdc9496bd06e17fe4bae51dd","sha256":"b20d59628a6e82bfe3d22e811157674b5a5b76cd58a87604e107ee4a6979023a","sha512":"8f6f8730b07041aaf4b02d13a9ff1d3d1456ae3deee144b95e77b4bad2dc354589ba57213977340b59293ddc3078a697249c477a8379b96e892a1d5c039d8699","ssdeep":"","tlshash":"6b718945b75f222159bb23e89f1b554cb73993360447024879ad92c05f72838e6dafbc","first_seen":"2023-08-06T14:03:54Z","last_seen":"2026-07-18T10:12:08.495397Z","times_seen":70,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/ion.rangeSlider.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/js/plugins/ion.rangeSlider.min.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-a0d3\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41171,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41066)","md5":"dd2250b414858d83d5bff500e9c418d8","sha1":"e6efd1a460c2f6c5d94924079e0f2029b46272cb","sha256":"54a80c57a4102dcfca059ae31110176b10e52706b4dc15bb6a621f38909ea64b","sha512":"9c62296d01ad3950f578684e42d5e9b20cf3201e785e111c29ec0bb99909a6366c64fd0e94bec85574663bd06432b0bf71db32313cf38f73df399c614871661d","ssdeep":"384:Ls4TfGuknYrmL1+y3y2yVRRV7Ry2ySx76gVMu9FdopOyqKy+gyIpKQPmchIUUe8a:w4TKQObixPRix076gVMAAESuPqUUe8a","tlshash":"a3033e962265b7410552d1e4240d0b4f5b33b26ea72380bc7dbddbdb4caad6870be738","first_seen":"2023-04-05T23:55:04Z","last_seen":"2026-08-09T18:12:06.262045Z","times_seen":15888,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/events/column","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/events/column HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894690.44548429457288785\r\nx-sign: GOs+yNj5XPLZn/CUJx5kV/XpPGht/WUJq0/ZYdrCiaE=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 465\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=bcennugvdwjrg0ehu0psqmey; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:8 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41680\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":465,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"92a541bb7009c74f0f470cef98f7dc7b","sha1":"2e5b75da749cbfcc466fafb2297379fbbae71e0a","sha256":"718f8c585317173fd7fd7a054c5500169a0a108e387aba8e86c8fbf04a8832fc","sha512":"6901dcf03027daeb686297ed3653f150798daf1bdab45c2e3198982cce6dcdfcbbc39f0e53881c2a40682127490bd42b63fc8041336f5069e313509f1e29bce7","ssdeep":"","tlshash":"71f06d2bfa0a0afe311759aeeb4627b830cf21db6e490700ccdc1e49a086f4e0d31421","first_seen":"2026-03-18T11:03:47.271812Z","last_seen":"2026-03-18T11:03:47.271812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/region/get","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/region/get HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894700.053077782025947595\r\nx-sign: xjOnCW4kz9San+8Wz0/MSF5RRMlPyMuMG8DcY2vfJ5c=\r\nContent-Length: 20\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"Name=FOOTER-SUPPLIER"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 48\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=t1zve0kw5ykrwscd55gwhtr0; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:0 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41684\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b14ecf50c10cd098a6d0adbd0f3d575c","sha1":"a83b17dfd34c921df7549e9307e30c08c886bb7a","sha256":"5c676732213295dcf31cc683488ec756888d4f59104786295c03eb247b140877","sha512":"74a85e193b2a16e59acdda1fcf453abecf40efbc31e47fa94323c051a638c572cdddc8d164d2a25ca1fbcae14e8a9779b1e943c1d3984b94ef708a02ed9d0ab2","ssdeep":"","tlshash":"15900415107754474544d11f047d354530c4504444004f54c31d034ccddcf5550530d4","first_seen":"2026-03-18T11:03:47.272734Z","last_seen":"2026-03-18T11:03:47.272734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":685,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/home-1/275x200.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/home-1/275x200.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac08-28a7c\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":166524,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1440x810, components 1","md5":"185bb61690b354ed41246d889947a5d7","sha1":"0304de7d2c83863b8fb0b926114cfc0898174697","sha256":"1ce15baf4ec822cf95146ea55eff8a5b2eba1cb967b1b0e195ba72f8926e1547","sha512":"ae22582ea039dbfd3bac1c0546234c3da78e2cb9ec00016883b403b854ab068305db508704b88728c865739c3880ab5f9a111e8015d726fdcec0dc4cef7e9ba5","ssdeep":"3072:QI7i3LFHc4vK3O7IQc6hHScMNiYKbX5ACRKD6WGIJ+R/oGMTdAodeii6oypZas:QYizTIX6haNiYsk6IGofJddeEpZl","tlshash":"c3f322039935d913222868f6b69fd0a58f6ac35f1eb33817749ec4615172272befc2e1","first_seen":"2026-03-18T11:03:47.274312Z","last_seen":"2026-05-24T00:57:18.649416Z","times_seen":3,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/jquery.magnific-popup.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/js/plugins/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-4efb\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20219,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-09T23:12:36.355329Z","times_seen":24795,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/fonts/flaticon/flaticon.ttf?4288423d0aa4597673ca56908c69fd88","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/fonts/flaticon/flaticon.ttf?4288423d0aa4597673ca56908c69fd88 HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/themes/zoom_jcw_com/skin/assets/fonts/flaticon/flaticon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 32896\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\netag: \"69b7ac07-8080\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32896,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 16 names, Macintosh, type 1 string, flaticonRegularflaticonflaticonVersion 1.0flaticonGenerated by svg2ttf from Fontello project.htt","md5":"7809a55de5fd0512c4172c33c8f9911b","sha1":"a802befe2c53c50ea9bab1a8623c3cae1bc0b4eb","sha256":"fee0bd810d39595ac937d3c3416f518f4e83ba59fd7eea586f6c22a40ac7e917","sha512":"bce7252e98a64a28536217a5734f60decfce08b17ed208d7ebd9ec4cfc795d8460b9683080b5c7a09f3e0e407cbb8a188ea54286228e1c78d933718b769f9ede","ssdeep":"768:IHsVEAx3HaHzwKlnG0KDSxH08rmrC8UKmzm5vrv:IMVEAx3HaH/G0KD/UKmzm5D","tlshash":"86e27c69b76e4d6bc322a6bb8de99131cfe1a404264379d37cdd3a288913dc01df066d","first_seen":"2025-09-06T12:34:42.280386Z","last_seen":"2026-06-20T04:27:48.32367Z","times_seen":6,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":455,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/config/getcurrencyrate","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/config/getcurrencyrate HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317904070.3131815376333925\r\nx-sign: V7IwnycEwObl0wdQvj3NZ/Kq8l1FLTP8+TVLfijvAec=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 3963\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=nmfdityjxutzqhs52odgliib; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:5 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41729\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":3963,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1daf033d751c5f7ca15a8aa98eb8edb5","sha1":"3ff61dbc09dc487e7e14ea2c643b236d464e3ca7","sha256":"dc198292bc573c4c6bbb69b49b7c2fce10d5fbf2d5fd958e536a4b4fa97daca9","sha512":"6b69467794abbcee647aceb8426327b438e2dc852619c8deecf7179c7f342dc5331baabb9155cbd47864b794caf6dff2408838f3e8a7a7232da18016105e1244","ssdeep":"","tlshash":"6381d98d245a18b5c9e35ccca5db6021172d73dbe4c38e774b9e1fec1260d63540ee6a","first_seen":"2025-12-23T05:43:11.644518Z","last_seen":"2026-05-11T04:30:59.380589Z","times_seen":14,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/info/getlabel","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/info/getlabel HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317904800.8011281056075565\r\nx-sign: wbCW7W+Qco6Azedr+ZijugbyUcFeepDa0lEY8j2u3/M=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15524\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=ms301howwp3zibwg1ylxqw05; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:8 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41735\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":15524,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"21c23accc7bf2ca3b5f0862981d6e598","sha1":"c09b8eea2decb742d5f8dea35fc66a4c713fd737","sha256":"2b17e553c5ff4c419efcd9829040fba49f9dd4870dc224900a823692411ca9cf","sha512":"bd9431c1f7028ec95a40acf53663de4197762bc987454ae787049575183c3312866d4215aedc957a60b98708ac6f2167b92bfea5cf58959bcf09deeec0c48c23","ssdeep":"96:fLfcAmSmrQqHHFINXutQgeTgLmi5u7eQDjjNuQCe0q/Va4RSUmXu8+4VFabd1dE+:D0YuagKiWHCkixyWw3d9lZi6c2Q+m4","tlshash":"8b62a36b03db6c8f0b665ac038cfa80ce44d119fc5c6df9da12d9e1da6bf1a650ea441","first_seen":"2026-03-18T11:03:47.279779Z","last_seen":"2026-05-06T01:07:03.423019Z","times_seen":8,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":425,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/css/app.4d02f46248b2f35405f96dd8e3f13017.css","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/css/app.4d02f46248b2f35405f96dd8e3f13017.css HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: text/css\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-1b45d7\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:15 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 151087\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41574\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1787351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3b2f55969ba4288ad5cbd606cfab82b9","sha1":"0d8982a4e4ce1801c5fa50e21eb227e5d4b6a7b2","sha256":"e6a8af1cafbee2e8961ca5b82fdc776c232c04a752f5f64d5aae2a40ff8d551e","sha512":"750b12ec683a05cef1b761eb33283dbb90b6aea7d5b1b192e32fde55c7f5821d3527f7ced926ab50a434fce009cfc4ab6070c011587f78a406810087a0749d71","ssdeep":"6144:iPJVDq94f7epDEB+0ifFRsfDOwCbnsQ/OLiM4iM1/1B6N9HJ1q1lybtUhjrDOZOq:iPJVDq4c/gnMuTsJeWu7nRlTUATj","tlshash":"5e25d664b65b255a323bcea937c46ba40e18f233da2126f7f523791ccbe31461126f17","first_seen":"2026-03-18T11:03:47.281015Z","last_seen":"2026-03-18T11:50:35.158718Z","times_seen":4,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:06.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: text/html\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-125e\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:1 (W), 0.0 VM-ARN-01Kmy5:8 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 4215\r\nx-ws-request-id: 69ba866a_VM-ARN-01Kmy5_10674-51707\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4702,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (717)","md5":"c288e68366d08413d91f10e27f1e696f","sha1":"cc8c790bb98cd267db3a1839248f57d5648399ff","sha256":"03c9dc2af1eb8675be73b08009ae7c2fe000453cbf17f202e5b799c6018852d0","sha512":"1bb1b78d5a76b6de983141dc2afdcf390d134983886f4a7c7f14dbcec3a2a2d67b0fb2a757b8d8426017c98a65380aaaea18bd9df1eb4b94903a3d59489d0b3c","ssdeep":"48:b3Xh9PBTXl21zMiDv/qt9SHi0A5QDwUnqFOl39VE/Md2IP7xAPwqhKYNlrOGl1Fz:zz1Xl2taf/QEufQf1IYvr1tWPV/Gzow","tlshash":"49a162791e42c035215398a82b7bd2417899f127a204c800fdece5dcdfd4f8a4dbbae9","first_seen":"2026-03-18T11:03:47.282236Z","last_seen":"2026-03-18T11:50:35.119663Z","times_seen":4,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":394,"dns":420,"connect":8,"send":0,"wait":10,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/css/style.css","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/css/style.css HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-554a5\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":349349,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"bc18ed4121eb0f1d3362a71f9e0957dd","sha1":"279dfaba8d45bb45db1c003b30d0b9c6e3aa53e2","sha256":"c04619760d6e9e7c95d81eb922820891fa458f3d180d5795e37ef8b46de729fa","sha512":"d9485de314c1cb3647e8fb7b27c06fb72606c900a49d574711e336a4dbb9f005de7fd97be29148bb1d90f383f888aad36f92ac88747b83c73647a36e211cf02d","ssdeep":"1536:1tfY64o60uFlYn5glcXmeuvxqYVwjTF/jlQCn+FxdfQYfz9Pwa9YF4KzTa8:C0pGo","tlshash":"357443548a8f205a1137969cabe54708bb5420d2df4306a97ffd106ed2c86fc6327daf","first_seen":"2025-09-06T12:34:42.133701Z","last_seen":"2026-06-20T04:27:48.277093Z","times_seen":6,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/fonts/flaticon/flaticon.css","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/fonts/flaticon/flaticon.css HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-a77\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2679,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"26c93e5aaff14339775014f01d9edff5","sha1":"2797564752f073018e6de575f95765c49e164032","sha256":"ac676696108d36a92cb087a4aa42310095db2cb0f657cf432b348b298444abef","sha512":"5ebc54a922fe8473f7e50c7b291cfac6c0a985846de859b36c5721f1a27f2e6c3ac92b78f19ec47020144c6e9a739dc52cb8a882ed62991e33acf52920bdc0e6","ssdeep":"","tlshash":"3e51ada991be04805740dac527af7650ef08b06e9cc49c5df282bf9dfee1a14d3922dd","first_seen":"2025-09-06T12:34:42.263331Z","last_seen":"2026-06-20T04:27:48.28683Z","times_seen":6,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/imagesloaded.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/js/plugins/imagesloaded.min.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-15e2\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5602,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477), with CRLF line terminators","md5":"b06d700e10940dbe0cbf9279791510c6","sha1":"326eba2a41c7d9a0e772362cdf1a25bacc766bf5","sha256":"fc0788b902f4a65e59531b2ec49e699a745da16746365500733e919b556c9f9c","sha512":"eafd881a405d6bdc1a5acf49297d515f9c8a87218f69797ac4a6be7d5e5710b2b4566060dc2acfc8c0a294926ced6f4f27362d061d457c4780801af452acb79c","ssdeep":"96:cww1xr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBVU:cwwfrycrr3rKvE9IjRxjGjgNhdTLo3rk","tlshash":"43c122cd77a275362296f0b3a21f020f7276406e6918815d7969ecf25cfcd092633bb0","first_seen":"2023-03-08T07:23:26Z","last_seen":"2026-08-07T16:36:53.636749Z","times_seen":262,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,400;0,500;0,700;0,900;1,400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,400;0,500;0,700;0,900;1,400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Mar 2026 11:03:05 GMT\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28105,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"d316ac0bc5b73e5b086b3224f0ac6314","sha1":"33a9ce770a7202db2553ad9ee8957a44dde385b4","sha256":"714f5586b067debcf59d5f7f030ba54ce16b4d8b12312271b41f8cdbf1bf2575","sha512":"a3432c775b8f1f1f75bb205d3dfb0f867f2767832fd9fbde8f42bc1cf6015b65cf976558724d0923acbd78dc4db1dacab9fb5cf2568134448ecf34cf852c1d04","ssdeep":"768:zj69tha4L8sRyjooYhREHPM5svvYaR7AIWP2ZZYQRVKyg1A77YGRvsk8:q/llff","tlshash":"afc22ea1041744409b838ce223cebf35fe1f92517141d0b9abfd9b6baddbca6526835c","first_seen":"2026-03-04T01:34:43.023218Z","last_seen":"2026-07-27T10:23:46.227636Z","times_seen":42,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":109,"dns":1,"connect":21,"send":0,"wait":18,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-jcw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:43 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 366323\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-10T00:49:16.501523Z","times_seen":258457,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":137,"dns":0,"connect":9,"send":0,"wait":8,"receive":3,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/info/GetNoEmbedded","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/info/GetNoEmbedded HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317890770.35468080088294696\r\nx-sign: txRN9flSuOwPqe0zTJDXrHxlZG4Q4LoQnbWPs7U0Blc=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=rr2gcl5aa3zyiyiioj4lrmby; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:1 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41638\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1b4ce045ca07fbfe2e06a96b2d3d0bd","sha1":"d631871c78419a43637065fc1a3189e7ab513ed6","sha256":"bff09e855e8e7bdabe473ed190c95d4a0ad849aafc895e0fd3236bef796c3d85","sha512":"bbf830ad8db5458d4a51f3e3c11563533e9143c5c5ba99ff1987e0b8e12920ce9ddb5106a37311e63b472bd84f2d0f455395329c185cee96df2775650628fb78","ssdeep":"","tlshash":"8da00203295b7ac31344d98c28e65d952055795a99408728c89c105add5ca4fb696694","first_seen":"2025-09-26T16:19:50.816064Z","last_seen":"2026-07-12T09:42:40.787971Z","times_seen":33,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/images/20260318022031563932.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/images/20260318022031563932.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 17 Mar 2026 18:20:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b99b70-9e6f\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40559,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 649x432, components 3","md5":"2dab391b0ddc2463ded35d3221866e30","sha1":"88c26c182f28814d972db32b243f2f13efef551a","sha256":"377e7419321dfeef4a54f4932e1d2c43697fca9c9d03569e781bca420c5221bc","sha512":"7bffd7f38ec738cf7b9d4d23d37264380150a2ac56f97505754e02f075d9eb040bc24cb2022433c8b4e2d36f05ec97657e333a22cf52d89c3d7500bcb4d462d8","ssdeep":"768:/QBFR1XlDsP0aV9rcTQ5m3ChUvwF9hkHv7vIHORPxvyv:/QF1Ds3VVUkBF94vVxvyv","tlshash":"e003f19e56f709a07f7fe458ab22382771c63b901834211eaa53a958fa74dd6e31d20c","first_seen":"2026-03-18T11:03:47.297172Z","last_seen":"2026-03-18T11:49:34.3351Z","times_seen":2,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/home-1/570x420.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/home-1/570x420.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac08-675a\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26458,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x281, components 3","md5":"10eea8977727a4a2c87135a065e7cd11","sha1":"e24e70a944c162cd1f427d5203adac49c436adee","sha256":"9ac76a409f8e439e13a48fea3c92fbddacc7910cab8f656eda7181f53eb2e76e","sha512":"2156ab00a2872e4ee6c6fc8b5082f8dec2a788d936eec8fc43d50c8a67d13a00beab8f126a6b5e6d40f63f22d511d9c5cfd94d0bfd0fcbc51657b9333f451482","ssdeep":"768:Cuh2IEkCouEbs4z58rYxV+4fWDQwXqFG0AU8Maksz:hkoAGxV+4eaFzXZa7z","tlshash":"acc2e1260eb7a24edf69893f74b708a217b8f91b4c7528702133078939e5ff805e6461","first_seen":"2026-03-18T11:03:47.298321Z","last_seen":"2026-03-18T11:49:34.335657Z","times_seen":2,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/home-1/540x350-0.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/home-1/540x350-0.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac08-aded\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44525,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3","md5":"986fedadb32d07a4423c04b90681fcc5","sha1":"831c2775d7482002ce7c47bda3457cf991543b6e","sha256":"d0c6990ac40af954807214e4afd724fed52326ddd2c658a8be2803a7f68f623b","sha512":"4a6bded194a75999b9c512d88fd710cb0eace3bf934defb26a81ff1f39979418f23e0132f26fc25d22bea27ec898658faed1fb44baaa395c77600e3adf55b1b1","ssdeep":"768:iK6xpxuefr25USeH9ExWuKiBuJpZwIqx5Y7BPDwITEpqqYJLbFtilg2pugrZqM0E:e5K5HFbuJwIqx5Y5D7Vf3Ftg1bZqxAOk","tlshash":"3d13f19771ecbbd0f92dd27158299ca410b53b5c271aac0f8d954ae3bce153b40da0e8","first_seen":"2026-03-18T11:03:47.299343Z","last_seen":"2026-03-18T11:49:34.345197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/config/sitecurrency","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/config/sitecurrency HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317898410.4224227901137432\r\nx-sign: A+NlDK+DstRd2TCMJaePJl1JZpkENkhKbsZS9j/Cj0Y=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 239\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=q3gvlwqvqfpnnmpfhsqd544r; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:9 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41700\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":239,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b5a649ebfaf2f04274f4a298b7aeb72c","sha1":"5765add0d314faf0ee82dfb866de0522a94b501e","sha256":"5029d3312566f29c8225afd4465a311cef95eca28d26d17486b24915fc5bccb1","sha512":"0f1a04c79e1b06374e264b33f45fc3721a3474c50c6260e5c7e0b9102916ce2ea2289c33a44117e78cbab95b4491c93fc0950297c3dfc1c2ce1431b0076a1bcf","ssdeep":"","tlshash":"57d0a7008da51cb3b856944d79c3140bf1a70e065da3df94087955d89d97424c401c7e","first_seen":"2026-03-18T11:03:47.305915Z","last_seen":"2026-06-14T01:10:00.500252Z","times_seen":18,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/info/maintain","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/info/maintain HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317904070.4540729990826782\r\nx-sign: gTmGoAqQnfFPhmhi/F6UTi+Ffir25KrAGvAX4TuKlkg=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1641\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=tjgxupedfwcb0k4kcp02yag0; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:11 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41728\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1641,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cf78bb9a76b2a9e87f4b8e45816f7f93","sha1":"a8eb8190d25d1bde5ec064b1135305ced1c1d9e2","sha256":"809825cfb01c749c26e8e9055b02ea4dc364846fca12f667bb803b0fb4238c43","sha512":"d096618aa345fd072b03ce70702b1a316a06c3b57fcc57c648c58612b3b456d215ca9af4c81febfb4f9a811fb360bb007f25a96353ab7c2550e3f0fcbe96ab6d","ssdeep":"","tlshash":"a431ac4f922e4cf65a04685a10df0b98fedd39c371ea5ed0538add11de5d0c8c027e26","first_seen":"2026-03-18T11:03:47.307867Z","last_seen":"2026-03-18T11:50:35.062065Z","times_seen":4,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/user/islogin","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/user/islogin HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317904080.19430609360009998\r\nx-sign: EXvroS9cisC41t++E8J+XI3TrQ+AekRZ6S30gofZvZ8=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 85\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=ajp5d4mgwcbfvm1cduci2xaw; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:7 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41730\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ba929894691783e1599b3b82019958c6","sha1":"0f2765afc17090cf762df3ead954083cb528a300","sha256":"5d2b6b02068048f236536d9ce9cff3efbfdb67f357eb898b6ae794cd44197b74","sha512":"a0a049b668d250e813eee7f7aa1ed21df1229d64afe51b2ea9c03890b8e06b562676b7ea74a026d1ff83bbcb10fd77a6873602c9b40a5ffda6a315999851d5b1","ssdeep":"","tlshash":"a2a01201209e33530a40404508210f8a214c101214004728d12840001909db42543548","first_seen":"2026-03-18T11:03:47.309378Z","last_seen":"2026-03-18T11:03:47.309378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/css/plugins/slick.css","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/css/plugins/slick.css HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-6f0\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-08-10T00:54:33.603829Z","times_seen":73626,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rajdhani:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Rajdhani:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Mar 2026 11:03:05 GMT\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4836,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8d22fc2ca9334507ec6c5ec3e097309e","sha1":"6f22549a83c339dbeea9616e3cfeeed0fe7b0c65","sha256":"963008c7db859ea5f47594fe6d468ff77a1a0b3bb82c919283b9aa86865ace33","sha512":"6f87a6bdbe8a53bfe6ad5a258ab8ea2b8f80b910be0bf5fd1af08a0946ef1ce5ad4b3a1a861575680393752e8e996326886a13cd2119da1dee6a92d2bdb85d2d","ssdeep":"96:8OEamOEacJc+uqOEaoN/OXaGOXaMJc+uqOXar6N/OxMaTOxMaTJc+uqOxMaxN/Oc:Txoooi4vDOHSVeCBL","tlshash":"eba1f291091bb940eb932cc113ce7e36ee0e23555814e9396ffe1c9cac9ec665351b4e","first_seen":"2025-10-01T09:42:15.712113Z","last_seen":"2026-08-05T02:28:17.205205Z","times_seen":125,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":95,"dns":0,"connect":7,"send":0,"wait":19,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDI2apCSOBg7S-QT7pbYF_Oreec.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/rajdhani/v17/LDI2apCSOBg7S-QT7pbYF_Oreec.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-jcw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 00:15:57 GMT\r\nexpires: Mon, 15 Mar 2027 00:15:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 298029\r\nlast-modified: Tue, 16 Sep 2025 03:40:27 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15732, version 1.0","md5":"ad9c55ecf03998391f7149c29543452a","sha1":"dcd4cf87ae721dd01a6ee29be033c7d70f9c198d","sha256":"433a7007e4747a02a790167a6efa2625855f013970ba49b9b739a5d3db8b2601","sha512":"4ba4dd00ea6cfdc3510f0a8b20427e095661bc253ef17533618373ec361af2fe5b1d912e02369a2a33c523dae7068aa0d56a2a233413f1041a029c4cbdeee27f","ssdeep":"384:Fjf7x9pcxpE5/f4Px/hIzqNLXpivowtuhkDRKn24IJEE:pf3peE9qDIzmWowqkFC249E","tlshash":"7262d06ec41ec5c2e414e175d753f4684a679b392c042144a2ed9f93cf7a0b0fea81f2","first_seen":"2023-04-11T11:42:32Z","last_seen":"2026-08-09T19:24:12.036248Z","times_seen":4230,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/manifest.f1d323b5ea7fb2a5284f.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/js/manifest.f1d323b5ea7fb2a5284f.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-c63\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:6 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 168505\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41575\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3171,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3171), with no line terminators","md5":"d3b88065b9b1c2f63cd335d38ba346e3","sha1":"d6391b1bbc52f45e45c88263f5fd354c41a51f52","sha256":"166c559da6d0d2f304389ce10e16f723a6624da53db03189b4351ef0c59f12cf","sha512":"e31239d621ce9b5c043c0a79a3ac7c09e54b668af07ca1309e26ef715a326ecaf7f599ef864aa2cd4f940e05f75c8f95235fb26ad7cbf57667982b9469f397ba","ssdeep":"","tlshash":"7b5109ee37b9f1d457721a85113bc834f23d39202d48dcca83a8e2af6d35ee451a1976","first_seen":"2026-03-18T11:03:47.316987Z","last_seen":"2026-03-18T11:50:35.148959Z","times_seen":4,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/config/login","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/config/login HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317898400.6272444949574545\r\nx-sign: IMvyo/2iXGkOC+70b6WhU1rO7nXN5IUof21yuYlk4jg=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 107\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=dofuwqtzfxzu2m5mig4x4cry; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:3 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41699\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":107,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e795d6ad4563b5034f4ea2556c9d10f1","sha1":"cad11f9811c63cdbe33526c43f32cec6b3d5cacd","sha256":"f0b1d85873d76bdd702da0b21c4580395847a745e128e4d191d09d5ba5d1021d","sha512":"1ea11e2e25ce35e072276a3d374958cf8c3acc98a7c52cd700fbf20d6983fbfbab0b5312af99cb239565f58326439f629ffcda52458c4a19ba9e3f0eb62cd08d","ssdeep":"","tlshash":"aeb0925d858700c3848440ce0422cf8250c0a8321c1acfad8b180968c5e552e178b976","first_seen":"2025-09-27T10:23:46.30918Z","last_seen":"2026-06-14T01:10:00.635417Z","times_seen":15,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/currency/USDT.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/currency/USDT.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 872\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-368\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04StD63:17 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41721\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c8349c60d1507e47c5bca41cf20953fa","sha1":"302926a484ad20087631c3e7a32f78a2ae6a87c5","sha256":"0b2dbe534eaae9acd4c86caef563613006798d5357b6e3066754b3860445ddac","sha512":"237b859c0163cb892978bf6f901902b568bbe5ea3c1a26c3ac42a36dd34744e9b7f5fa523d2be763b2e5b875fb711eeb0212c620cda65b95a25148235dbe425d","ssdeep":"","tlshash":"851156f11761f7d6d279783815547a58dd9ca6b30135f98f2f46864031a89988149813","first_seen":"2025-09-26T16:19:50.824066Z","last_seen":"2026-07-12T09:42:41.068682Z","times_seen":33,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/home-1/540x400.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/home-1/540x400.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac08-4934\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18740,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x281, components 3","md5":"d07622bc8d90fb4b91f998f070616771","sha1":"cefc5b9c25bc4e102cd30cc7d4290f565c16b5c7","sha256":"1d3dc8a12f8dffdde741ac62769b1798dd26c43af8ed0f93717f24cf79a7fd59","sha512":"9ee930677b14229d51f6916fea05be62652a6588efe86006743f1d365d1e0f197bfa71d3007535f9dadd4e957344c112cbba896c8b105b3ca7fb900f1c5bd28b","ssdeep":"384:nP+GFBe94aOZnKxzuz4jzMoZWKv477wbaWdgroK0vSsT8Sq:2uemaOZLuzMPK5bDMqSsTrq","tlshash":"7682d01373c65087ff224c65096f5a1db94b38a1a40211b38693a35cba71eb5256effc","first_seen":"2026-03-18T11:03:47.32108Z","last_seen":"2026-03-18T11:49:34.379278Z","times_seen":2,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/partner/gc.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/partner/gc.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 8029\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-1f5d\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04yjD60:10 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41671\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 364 x 120, 8-bit colormap, non-interlaced","md5":"280efaa053f0c15b617a0e71b2f2094e","sha1":"b31c93e263230efccc4bb2eebc188ff3500e3256","sha256":"f2c0fbb8375a71600ca4f2475c8386e3f2eec88c52828c18f7803a2a36da6d1d","sha512":"bd5ae9074f205105df3a0b79cdbdfd18f3de4ead2d0a8b14fff923c9b83c3fddc007478dddca1e6b5606a58a9eb83890ba0cbdf1274abcf2c887f8391fc4ecb6","ssdeep":"192:X/lF3x5KeDnOsEUiV4/zGAC7IycMYFHqUx7/xmcn:X/zh55DOsQ4w7IZMYFtDxmcn","tlshash":"f6f19dcb9eb1606430ae6687ed04dfc46e095c590921e793b203529b4fd4cfaa7f884c","first_seen":"2025-09-26T16:19:50.830916Z","last_seen":"2026-07-12T09:42:40.814977Z","times_seen":33,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/news/list","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/news/list HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894720.13110453081245765\r\nx-sign: mkL46xpyVWPlICWGApY8RXuGHu7o9PCxmEH6R3l36bY=\r\nContent-Length: 23\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":23,"data":"PageIndex=1\u0026PageSize=50"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 7542\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=lxtq3gysukjx2vdaxtilpix5; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:7 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41687\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":7542,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5ccc3185d3f4c4296353cbd011299d54","sha1":"fd923ef5f26f501875188311744cf0e1a2fe8b56","sha256":"f02ba289108992969329b9a19a2d1701a203877261b30015e0b860b4b265c399","sha512":"1f22dd39730529a88021201ccec6880ea67e51e106f4d705fc3cf38fd0f3e9690b4590d96fe0cf0d5200782d583eb1a9d9bbf702b2ade9971cc05c3ea554cb11","ssdeep":"96:rXtHcDo5umhqCGNQXwa0uMjnyp1ABo6b8Tt3N3Wv:bt8MfwcwpjnC1yzQTv3Wv","tlshash":"1df1fdd6eaf91f9a1dab1d80ec3af15df10a71581e0a89678c3b05fbc744378e52a341","first_seen":"2026-03-18T11:03:47.324563Z","last_seen":"2026-03-18T11:49:34.329361Z","times_seen":3,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/home-1/350x350-3.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/home-1/350x350-3.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac08-9d1c\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40220,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3","md5":"5ef924b88ade1bf8d3503a2bab2df9b2","sha1":"9bb414c3371758d63f95d4d637ecc5b4bef1c7ec","sha256":"f71560b97b7cba30acfdeab61c96d61a8697c7e3bc7118679d29a958f97e4ad9","sha512":"d1717304bade9b765fdc6420901753508043ac090bf80cad7d79b8c9bbb563c0bb862cf9cfe7f4f82ccea078c71ffca3e0b389d2e1f652af9dc20da10a0649bd","ssdeep":"768:m8eUXT/p+6yFyOR7g8QuJyT6juKh7GQG85HnEXWTltGsFLjMEbrkpT63FjbkXGUP:MUXT06yFyOK8QUjueGQGGH4W5djMEXkX","tlshash":"0303f14b167330cf5267a17698a5b367f11336fc8a52584dcaa3cacd2dcf7a0c172552","first_seen":"2026-03-18T11:03:47.325785Z","last_seen":"2026-07-07T00:28:01.64939Z","times_seen":3,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/jquery.inview.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/js/plugins/jquery.inview.min.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-4f0\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (505)","md5":"4edba1c65592e5e64d420fe20104eb79","sha1":"a0e2be2157e43e2dae20e43d08af042151dd75d3","sha256":"423e09ae1666148e2718bd7aacfb05d17888e0554eb51fc343ef4317ef7d3b62","sha512":"d02491ef9bfac2839800067fd258adabdd6e36ab53de020f59b4fd82950cf922c32ae0771ccdee813a668c66a35e5f5183a8edd506d6efd89dbb44ea73a9ca72","ssdeep":"","tlshash":"3d21e0297301302ed0df64e3b1ae1d091863a237d302a8d5953ad8d9167c47835afa9d","first_seen":"2023-03-07T01:02:52Z","last_seen":"2026-08-09T09:15:19.81814Z","times_seen":596,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/0.dd128be9313d67725825.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/js/0.dd128be9313d67725825.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-f68a6\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:3 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 151086\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41631\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1009830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"8ef08aa91899f0c2e18a6e391d6be428","sha1":"63c4d60c860b78332c9729000d502d05dcb32999","sha256":"4cfce93e499a6434609e5c289794ef60fb04894d8b34e7b91c410d6637ec3aa0","sha512":"5f71b70f2a28c9fa0da326ec1e59dab620fd2efcac7974521af669b4b807860ba5e22bb9fb28563a29db26eb4c03a7d1d048779c5b8ee5d4f316ef45f92893ec","ssdeep":"12288:cTkrSg07HeJItqwOACRLwiWppjpruknaQIV:cY907HemRO/RLtW7pKUaQ6","tlshash":"a7255db43291606a07eaa0d7402f1b01ae7d5e2b640dc0acf62dedd72eb4b05e57b774","first_seen":"2026-03-18T11:03:47.327455Z","last_seen":"2026-03-18T11:50:35.093325Z","times_seen":4,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/page/info","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/page/info HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894810.2747961491303761\r\nx-sign: G6PTK2rh4fOLnW2GzZobfZdkexNqUBITdwg3RRoZo/w=\r\nContent-Length: 21\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":21,"data":"Name=M3-GAME-CATEGORY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1797\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=aommh51y45xoo0fmh5ewfg5q; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:3 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41688\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1797,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"64b948b7d4f81b1f48ce02b96e32211c","sha1":"ea181fedaff801d8eea9fa3e8d4cbc79627e1cfd","sha256":"107f6aa61d89536720b41a57bafec8fa04d779e1760e6122474b2c0fc8a07db7","sha512":"64b9e0896be74f99e29d31ee972a4cbc7158b97bc2f07a330b57542424e9504df9655bbb887ce2c07fe6f03f80ae8ef6da228231874cf0186a3f5c193b09aeb4","ssdeep":"","tlshash":"fa319c72d4630c350b1f2a5000cd6c8de1ce63ae85c9de66fc1cce8b91afa49616609b","first_seen":"2026-03-18T11:03:47.328653Z","last_seen":"2026-03-18T11:03:47.328653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/home/yellow-bg.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/home/yellow-bg.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 11921\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-2e91\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04Ub762:3 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 133957\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41748\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11921,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 202, 8-bit/color RGBA, non-interlaced","md5":"ab8f5cae46050c8818aec33253e42438","sha1":"38e290906c32f31faf30f916c6c823a40f5cceb9","sha256":"64d88738348f9a983ed4f3c2229a0eda8d60014893f5872c8bb0e840895206db","sha512":"c83159d93ff01c8628abb08c7620afb40768694ffec61667b770f0359ae01a7e03d40a0cc09550fc400b38996b15cd5ec61a91e7fa6129817f964e487032b956","ssdeep":"192:Z7F9807T9Al+xD3BGsXalflpOlh8P8/yLv0URnZTmjSv/Zxurxo2iKR+08BuzofJ:Zf7TRDG0k00+yLcpSXZxAo2iKUdBjk1y","tlshash":"4032bf1c9d208691d91beb1ca1dac89da32700cb49cfb2dd696f499dec310be746c16f","first_seen":"2025-09-26T16:19:50.82522Z","last_seen":"2026-07-12T09:42:40.877167Z","times_seen":31,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/home-1/350x350-4.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/home-1/350x350-4.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac08-8635\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34357,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3","md5":"32f0f450196daf4bc932777602067817","sha1":"b9168a23a540bb60bbc11de9e223a8fd9ab0f9b8","sha256":"1c3262a922d969411e923e17a0c7feb034b510130dde78cdf045ecb16f128312","sha512":"1cae451af54d7db122589b9be306eb71f8579f2e95dab8d73f66521769d082e77057694b8c3506cecc253e7901ff3a429782e4f31561fb0239d547e80133bdb0","ssdeep":"768:urinbim05ml7qjDeVvOrM8cvprBpvMSlv4LlXjeO2rnfqFQRRBL:uKNqXHQB1DvZQVjeDniFOL","tlshash":"9af2f14e921d40b3e6024e24725bbf2da2fb2e0f5767ead103f51a9631046d69c02b85","first_seen":"2025-11-14T01:19:00.226564Z","last_seen":"2026-03-18T11:49:34.33628Z","times_seen":3,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/info/get","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/info/get HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317890750.4175214417440716\r\nx-sign: T0hE4FhlWHszXtQDIX6BMS7CUItqvjc65OvQ42KaNz0=\r\nContent-Length: 16\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16,"data":"SiteName=9d1.pro"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2575\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=20garhnbexcnnl3hkxo1ehqp; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:11 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41636\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2575,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6a2bc8b8faf49b8da3226140fca6d40a","sha1":"7bdb7fb947286cc0aa45240dbdb46d7910fc1633","sha256":"cc3d942d01fbec633ee76af471849f94100c1b101050449ce4257861e2dd9dd5","sha512":"df8bacc332202a02fe9c268d526973398fedfdeeb029098dac1615c7f244c9652a623f19057de54adabd6b3fb684e5d9a611aaa2a4a462b62fcab5da7e3f7711","ssdeep":"","tlshash":"5a511092279318e96b0a22d5598fb80b848e231fcec6c754f5594e4881ef59a634f057","first_seen":"2026-03-18T11:03:47.332128Z","last_seen":"2026-03-18T11:50:35.091164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/news/info","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/news/info HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317902020.08736717136751881\r\nx-sign: fsmgUhJJAVCi86vRdj8LgH6oOllvQnkIOI6uyhBCV3A=\r\nContent-Length: 7\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7,"data":"ID=3556"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1596\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=2cbodefycobcq5ne33d4b1j0; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:3 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41713\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1596,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"64a211abf939545f74e8c38770c88d1d","sha1":"0d418bedac738e429de19781ad8a14fcba339e83","sha256":"c7db9c1d9da029f9aabc33e77123679f6a46a6444624f7e96b0f7fc6dd4d0df7","sha512":"8a65884df4eac7d68fdccd175979c50836fe90b7029506f4fcb4719ddba47d4305477daad841108b0e2488eba08f6e438b597dac41792d0653854dff50dfe45d","ssdeep":"","tlshash":"3731dfc6ebf41ec609672980ddb6f11db51962580c0a8b3b9c3f02eac758778d457716","first_seen":"2026-03-18T11:03:47.333143Z","last_seen":"2026-04-07T08:47:39.640822Z","times_seen":6,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":357,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/vendor.812e883b1b860447096d.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/js/vendor.812e883b1b860447096d.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-224650\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:18 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 168504\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41576\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2246224,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2ad91d674ef50725342ddb35f489f16","sha1":"5f75349898ea7bfa604344a67bc0f1e6cf7fff26","sha256":"378af61f200afd6badaa41128942c15c3a26ebf18fed180a9131fec917b2ee8d","sha512":"b904161977189326fa86710c1904030bafd52623622e4ec88ee3b49b58ad55a1995b89caf1e6b9bcc7b95889e1c7d465495b0e8c7a2ddc396a4db0d35fb05ce6","ssdeep":"12288:HtzmGHlMt2GAVdams3HF5+bo3FdtnEFlFxnG:NzmGHuAVduFQE3FdtnEffG","tlshash":"fc250a89b291b02147eb65a0003f110ff23a795d680a44ecf665e8e67dbd98d913bf3d","first_seen":"2026-03-18T11:03:47.334034Z","last_seen":"2026-03-18T11:50:35.146709Z","times_seen":4,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/2.672a1162769c57913824.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/js/2.672a1162769c57913824.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-bba3a\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04a92226:13 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 151086\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41632\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":768570,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"4efc9ed46e06ab4594531830f769621e","sha1":"cddee92b894288ebb1b8630136566cb78bb047cd","sha256":"c6e3a1c9cf8f9d1c038abe117b50b8bf6912c5f093bdd3312f5ce20d6522810b","sha512":"f5e0e97d52cb31122b634aba4075bb7fcffd397cc22b68a72542fc5191b1989b6f47a8cc21556f9804f68ae32e3962818badd5b49d5215145a11487c71bc27b4","ssdeep":"12288:i7ko7IW+z5dpnOib888GuiKa97r42kNUbb2VclKR2X0HeAggd6j0o6E9ILBqM2VB:i7ko7IW+z5dpnOib888GuiKa97r42kNo","tlshash":"5cf4e7de3a0a042a9433ef7a3be5373812a96753c425195537ceac83cf1a7f021597ad","first_seen":"2026-03-18T11:03:47.335719Z","last_seen":"2026-03-18T11:50:35.114533Z","times_seen":4,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=%27G-WY45Q7VQXC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtag/js?id=%27G-WY45Q7VQXC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\nexpires: Wed, 18 Mar 2026 11:03:09 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 18 Mar 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 84049\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229308,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4091)","md5":"f0d1f10c2a97461f4f5e7520fb9fc6a2","sha1":"b4ae427688a43e81c7eee494a7d685beebf85f22","sha256":"a996cb1fe2df71a5d4d26dcb76f90edac6e30702190ee6e2fdf9e1c7bfa475ce","sha512":"bb773dd8811c4ed909ebd3f78ba904ce2af2374db1b3c63108b96cda3e8d8e95aab0a923b17c1512b9d19d3b3642e241419a68d48ea370f2f85858f510f0fd38","ssdeep":"3072:OeKcxFDs95m0N9bjRP/E1oFwtgLG9Qjp2oFaxaXv5ZwGwEeVDsFiRzF:5jDe72FWgn8Xv5ZFwEeVDs+F","tlshash":"16243accb7da70664393a5b8503f004bb27a7992f84cc894f192d8c46e746aa5273f7d","first_seen":"2026-03-18T11:03:47.337073Z","last_seen":"2026-03-18T11:50:35.186294Z","times_seen":3,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":38,"dns":1,"connect":8,"send":0,"wait":17,"receive":16,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/common/no-data.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/common/no-data.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 2439\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-987\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04StD63:3 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41666\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2439,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit colormap, non-interlaced","md5":"827ec62e3a6f9abd6525732719f03452","sha1":"c1af9a21c2941f494ecb40904c2da5199840631b","sha256":"1176b96a531fc5d9ab6262d3f2652256edf7fa73faf06cedf061be199e6b66a7","sha512":"c5a22fcaf8fe57f98be44eae9bb2e46dc1e81b6cb64d5fe6e07fc6e28af09324270e203f8cb3514bca9bb3188afd29fbd7a23aa4821a7f329f6ab32db02200a3","ssdeep":"","tlshash":"b04108ed0090921a6dd6203a7ef526c00838ca6898b56ae27a7bad281147d5e0e84727","first_seen":"2025-09-26T16:19:50.864639Z","last_seen":"2026-07-12T09:42:40.919262Z","times_seen":31,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/speed_test.jpg?t=1773831789026","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/speed_test.jpg?t=1773831789026 HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1591\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-637\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:3 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41635\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1591,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"14f643fef8a6d61e5a017a5b9e38b42c","sha1":"eb6f77a94bb87ef125ae617c204b0225b3fea49c","sha256":"d711f46f73acec3f31eb0e7d4f47d05226ed6000e4a29e2ca382856f3aedaa15","sha512":"dea6e71702af91128aec18cf2e398a4a7e3ca4bd1d30943999e4240806477fd01f77497de646ee1d23999910ed888dc3dbe8f757a66981b3d5ca82c58fa77a0b","ssdeep":"","tlshash":"7631021af9a1bf42d8a6e87035f2402b9a11ccc8a8c5e95ad8f9c4261e750f10d7a5cf","first_seen":"2025-09-26T16:19:50.843517Z","last_seen":"2026-07-12T09:42:40.783963Z","times_seen":34,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/user/info","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/user/info HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894650.3326552614181967\r\nx-sign: z9Esqsr+xuM5TStb5a+scf6dnJi7b7qto+jAfqYN00Q=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 42\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=s2px1teq5xhhzis4rdq2qj34; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:3 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41673\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4057f1aced36477c0003dab992d85c76","sha1":"9b7568939b59bbfbd5b680906349d647ff2cf918","sha256":"298700b893cc7df7eba3dc41c6664701168edd6b742f605f4d90ec1d523dbe37","sha512":"e152f7f0a096d52d87850b9903b245c917bc9edf4a89d0a8d5c64948f1264cb45ec605ce7fe9349679725f02a3fe950b722ba1022f67bd02102ea14bbcf345f0","ssdeep":"","tlshash":"de900445c0471fd30154100c0535050f11cc504144004714531d0d045f54dd01473044","first_seen":"2025-09-26T16:19:50.814776Z","last_seen":"2026-07-12T09:42:41.027678Z","times_seen":33,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/currency/PHP.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/currency/PHP.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1482\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-5ca\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04yjD60:4 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41723\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"eaf5ff08b5048109e89999f60ca3fa35","sha1":"4320a3e4921d6b4eefd04d89e8fed926cbe98d06","sha256":"4f222b1fa0276fae692c3c7a9a87eec0c605df00b7dfa4c4e9c2369db6ff709a","sha512":"530e4f669a58c96560016ff8db7560fc919cc8a2b3083ba677a0651c6e2dd32b0a746e243a682bf09bc30e5b3b528e11547baafdd02afca175ed9d75c655d0b9","ssdeep":"","tlshash":"3731c77121f9d163a9f2e40ccd20f9b03680aa1f7597099c71ea94682b5208a4a8861e","first_seen":"2025-09-26T16:19:50.871897Z","last_seen":"2026-07-12T09:42:40.849089Z","times_seen":31,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/recommend/news","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/recommend/news HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317904900.13439372840674646\r\nx-sign: xwEfxwi7ZXH14xH6hMuuouwZWLyrCB9EJgtPvVrVznU=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 85\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=bwprjsm2quqwg1bmniludaeh; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:1 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41736\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1710f8a80d60dffd262da966b1557d7e","sha1":"14386ec708c979d426d41a853c857ed9418af40a","sha256":"a0bb1e27c046b9946b6cf5d3da89bfeea35a38c269451e4501f0caf0d689d4b3","sha512":"44ef9c832286a0520ec1e0ef9e53250c47e420990b36035db1d3de756928b8bac28a6449cfca5295e6769fef02e51021b50b5ec2626a01c8921694132b7cf59f","ssdeep":"","tlshash":"f0a022082c0b0c83388ec00b8c033c3308cca0830e080fbcc0ae2b8ccaf283cac02002","first_seen":"2025-10-05T08:20:38.635603Z","last_seen":"2026-07-12T09:42:40.762892Z","times_seen":29,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/user/islogin","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/user/islogin HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894670.24864260594166931\r\nx-sign: IC8KG3Z6SLtgx/Ors2fKNrb+GtYcjkfoOhw3yu1XjY0=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 86\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=4ngqeiaei4i4u1w5cokysxea; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:10 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf358fa26412e5650751959d5b953125","sha1":"15282092ffb8794b4646eac3ebb8746c0f8eba62","sha256":"c9a52e471f07e0a1a085b95ac89df558905459404f9e2014a2df2ffaf3ec1039","sha512":"857d5226b57aa7fb3d63ab274c06a294e110973fecb6a49db909f932134a28f1bae7d24ccff254f5d907f306e5658915aac81af79b5c66c2b241875bd3b1756e","ssdeep":"","tlshash":"e9a0240030df33530d5000050c354fcf734c00530c01471cd13d40007d4ddc43543544","first_seen":"2026-03-18T11:03:47.344295Z","last_seen":"2026-03-18T11:03:47.344295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/home-1/testimonial.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/home-1/testimonial.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac08-34f0\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13552,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x281, components 3","md5":"3ee4d62ddae14f6718f50e51d9fcc64f","sha1":"d4b9d8d2909b62475cb9c30cc864c556e8fa707b","sha256":"49d74e6a87b837613768dc213c943aada4a0cf53475f974ccd6fc16f9ea1427e","sha512":"ef787671451173912600f3709834024eb17b87dad4f77d5c7ec8360b5471803dee39fae979110354a6feb67079102c6c808cdbb52e1d9e07148400b1e47c3854","ssdeep":"192:LC0OGxU951mNVFHbFqfNkV4o5jDOVJbra55VFjylLVi/VF7WNwCJ3B3/3xdb09nz:EiGm3F7yNUdp2xrPlLU/bQwCv/3xdbcf","tlshash":"de52b0fde299cd91ee061a33da5c10f2e7477d1e1215587d36234252ab19cb04f9ef90","first_seen":"2026-03-18T11:03:47.345303Z","last_seen":"2026-03-18T11:49:34.352507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/host1002.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/loadjs/host1002.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-3e50\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:13 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 168503\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41572\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15952,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1233)","md5":"459fb0e73f13b903624b6575aa60f19e","sha1":"b7e12d188f6f304f072f3dcf9a4682b3d95c0c1c","sha256":"c7c9313039f59e4cdbc2ee408bd8af0868052e6dcd367d507b29cfc6b1483cbf","sha512":"3fae179cec6f787efafd76e40eab74f57171949168ca435a2b704fcb81e6873516b06e71606e649395b641d1fef9c4939a092f3578313fb4a6c9774ff8344d49","ssdeep":"192:H4Xv065altoBdjPg1fVC+hIR4Q5JEtQ+UUccKKSeeaaiDpFFRvvbbX5jbfjjXX5n:qv09Ad4Q5wQ0f6VGizX0j/SEzTV","tlshash":"8e6218a9f44d0ac6626e7e3cd0ee69a45a1da1b2e2335533c853bd710897243b370d3e","first_seen":"2025-11-23T08:36:53.370816Z","last_seen":"2026-07-12T09:42:40.914341Z","times_seen":31,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/fonts/iconfont.woff2?v=7b0da76","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/fonts/iconfont.woff2?v=7b0da76 HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/static/css/app.4d02f46248b2f35405f96dd8e3f13017.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25252\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-62a4\"\r\naccept-ranges: bytes\r\nvia: 1.1 PShlamstdAMS1hm28:4 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41661\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25252,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25252, version 1.0","md5":"7b0da76169563722462c442df4536dd1","sha1":"e4ee7962bc2ece7e100302f2dbd406d097fcc6c7","sha256":"f7a076ab6b5fec58421a7821ea0dfc1ee536a85b4796052aaef04121af8ca207","sha512":"83f7c8833c1f53b651f2f24e4863c3b227f3620dd89a2c590ad9b40d1c65a38ad84f9e283135ff9bc788f1a3f93fa339d5f2bab09905dd6401fc244cb4f0c258","ssdeep":"768:lNwsz9q2x85QaxLDVWlNA54b2Q7v7zUUt5:PwKPx85QaxLDVWlc62Q7v7zt5","tlshash":"49b2e12651a7fa7965e085bfde0e05cae421ab33dd0b304605be4a360e13df989cd4a9","first_seen":"2026-03-18T11:03:47.347606Z","last_seen":"2026-03-18T11:50:35.094002Z","times_seen":4,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/favicon.ico","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:06.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5332\r\nlast-modified: Mon, 16 Mar 2026 07:06:48 GMT\r\netag: \"69b7ac08-14d4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5332,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"2da80035bfcca8b2fe307c8b261b5a1d","sha1":"95e5cf7a4fade4cca26af5c79d062a1ae08099cd","sha256":"19797dbc3a025dc85ca3c55f5b1a11e61ce064786699d4a2c8030bc25cffe607","sha512":"fecfadb7baf5642d2b41cc60ec81ae69c6fae2c31be9d8177ff82eeaa38cb56c07b4b82e1e20f9b90330f4788dd68182ee90ac2d1e1abc27e208844baed8c9bd","ssdeep":"96:/iNLN+LckyR0+AyF11D24hc7JE7373Ts9ejZ5minbNSXD15Dihb0zcMj4cpd7Uun:/i6wkyR0+xpVqdC/s9aZsibNSxclTMj5","tlshash":"21b16dcfc3b281a4dde45c371106f29e8f32861b4129595d04d2f9531c9cbbd8b225af","first_seen":"2026-01-12T10:38:27.115779Z","last_seen":"2026-03-18T11:49:34.318338Z","times_seen":3,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/fonts/font-awesome.min.css","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/fonts/font-awesome.min.css HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-13782\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79746,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65390), with CRLF line terminators","md5":"34c742d74d922aef3a2bf93cbecf32e3","sha1":"7d7386ccfc01888abc782752f628daaf7d9b66b1","sha256":"fef6ff08e3dd9c340d7d924ce2a278c11a4bd1bc2d4b0ddd58a446a9650063ed","sha512":"7e7acdd4a6c5d3319c4e3564344c074f97d2376537d948a3ae042be509028ca9aa12b55304b24cba9790b846212ec9b938ea1b60014f00f0f5fea2765df4fff4","ssdeep":"768:9uj31owDUbK4asPffBCYHfWZD+Kyt/1MFiWJb+VzHY0K2+qjdW9:9u6woG4as37HeZDZyXSMVjS2nG","tlshash":"7073e9b8e54d01d9a732c04fbf42b2bc61baf73ce5911d95f00e592c2ad26a811c9f79","first_seen":"2023-10-22T23:16:30Z","last_seen":"2026-06-29T08:36:52.802816Z","times_seen":45,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/info/maintain","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/info/maintain HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317893280.5375266937571777\r\nx-sign: jVlJhL/J6GhiPisk5U1UdepPP4u9C2lQybvTQYi298E=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1641\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=5synibe4se5pq4xb24phc5qp; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:11 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41660\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1641,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8a8e8faf994855d897162846c51d4c90","sha1":"60fef599c7f7c6fe6eb891f3969cc0a5d599cce1","sha256":"f5b8209d7d2231b305a14b8472ac6fc8858457d76b010731e52514a044b6b870","sha512":"64d3c1e6cc2ee790218b995fd7860020b4b292358b5a8be9292f527d26ec98ea9b6493b34ef91ced51df702c52a4a6f75a57102beb01a18da508cf55754e97df","ssdeep":"","tlshash":"c231ac4f922e4cf69a04685a10df0b98fedd39c371ea5ed0538add11de5d0c8c027e26","first_seen":"2026-03-18T11:03:47.350366Z","last_seen":"2026-03-18T11:50:35.08577Z","times_seen":3,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/partner/gambling.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/partner/gambling.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 6523\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-197b\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04yjD60:10 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41669\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6523,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 294 x 76, 8-bit colormap, non-interlaced","md5":"588f89c42a31b93899c6968c0e4f97a4","sha1":"28f4a4ac81b88d6982c940ab929c0be1bcbfbc68","sha256":"dad547e94675c75d2295fca8a31a788de79e20656e8e6409f560f73826befcbd","sha512":"0f9abd6ecc5dcb89059298ba2ab208d7af2f43f29011e72a76229644e914e0a94b9c2da11a3a9d2a9569809c24d56e15475b138380f0ae7451fe16433f3f7163","ssdeep":"96:vRH3ZVp31Eex/kKI2pGiIcZ0uWPNf0g6B3qRzr0mQI6XtYtwMY3ths2v/0w7wXi3:vnz3yG/kKzs6peR6B3tYGXPSKwCe3gl","tlshash":"a6d18d7c6e12f4a09ef9b7921c382b078e6efb46cb345315906ac651213d00edd74a0d","first_seen":"2025-09-26T16:19:50.795645Z","last_seen":"2026-07-12T09:42:40.954028Z","times_seen":33,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/partner/fsc.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/partner/fsc.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 71487\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-1173f\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04Ub762:4 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41670\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 178 x 178, 8-bit/color RGBA, non-interlaced","md5":"b25324b69e8aa6ff0b664525c8e1e0b0","sha1":"b9227e1b4ff32c78518975a231ef11bbf9fb5044","sha256":"76ef399775a8964417f4dde833e286026f432dabf765558f7c15ef72628fe46b","sha512":"8fd4e8422333d2d776826504c8d0df88d490c0e48aa1feba7c2c240acaae0fee597ff43cef10d4f6b942dd8a0dd53ad4efeba8f5ed8968911384e68645af93c6","ssdeep":"1536:KfQCYU66lL9Thwd0CxovRzHE9LiiXJ9YQO9kvdm2r0aF8:Kf1YEFVhU0Cxo5HE9zXJGh9kVBIa+","tlshash":"036301cb8e35171065fd00e99d15cafbb68cb0882a353f4aae4909f313a96144bff618","first_seen":"2025-09-26T16:19:50.844565Z","last_seen":"2026-07-12T09:42:40.945745Z","times_seen":33,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDI2apCSOBg7S-QT7pa8FvOreec.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/rajdhani/v17/LDI2apCSOBg7S-QT7pa8FvOreec.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-jcw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 00:18:55 GMT\r\nexpires: Mon, 15 Mar 2027 00:18:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 297851\r\nlast-modified: Tue, 16 Sep 2025 03:40:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15688, version 1.0","md5":"d5448938a162ccb434b09f4572c0191f","sha1":"be9eae3d1d9f4fbd2208e0fd3c871b17b65b6516","sha256":"5b7e4a6f97163c2636724d4de90304fc895653dcfe64c67a7a22f26331ca5c5f","sha512":"df0245084768642738387f7a0daa11c4bd0109617c4120bfd88083c30d686ee2bd327e426ce0d9ee1f50839c5e2890f8a2a2d7acce3705fe8fa324fe623ad942","ssdeep":"384:Bktl5HsgImpL/2gZDAMAyNWE3pZrsjyb2mf+X:Bkl5MgDpT2g5AMtswpZZ2mf+X","tlshash":"7962c046a5a6b998f4d4ecfb0086542c19bb5ca11c6230f3c719356f5bd3e75cee4540","first_seen":"2023-04-14T01:29:53Z","last_seen":"2026-08-09T21:26:46.248112Z","times_seen":6104,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":206,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/recommend/list","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/recommend/list HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317904080.23317534163161258\r\nx-sign: t0Ky6cfCZvpRo43IIeG+EeWN22qVWtO4KP5FylvnXvI=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 85\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=poy4ke4js3j3gs5oroaknkfm; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:9 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41731\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1710f8a80d60dffd262da966b1557d7e","sha1":"14386ec708c979d426d41a853c857ed9418af40a","sha256":"a0bb1e27c046b9946b6cf5d3da89bfeea35a38c269451e4501f0caf0d689d4b3","sha512":"44ef9c832286a0520ec1e0ef9e53250c47e420990b36035db1d3de756928b8bac28a6449cfca5295e6769fef02e51021b50b5ec2626a01c8921694132b7cf59f","ssdeep":"","tlshash":"f0a022082c0b0c83388ec00b8c033c3308cca0830e080fbcc0ae2b8ccaf283cac02002","first_seen":"2025-10-05T08:20:38.635603Z","last_seen":"2026-07-12T09:42:40.762892Z","times_seen":29,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/common/notice-icon.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/common/notice-icon.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/static/css/app.4d02f46248b2f35405f96dd8e3f13017.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 5071\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-13cf\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04Ub762:3 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41745\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5071,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 83 x 83, 8-bit colormap, non-interlaced","md5":"d1ede92ef26e28b323f9800ef58575e4","sha1":"7648ec6c14d834cf26f85fe553b4071999265c07","sha256":"1f1da38392d1a28c94e6def76b245fa1f2e12d87963e5f22b6a255103ec6129f","sha512":"43c427269904b44788eff71b4f558dd760029137203ed95f42d7cdc9f43b43496e43409780752d6ae524b86b63a562dfed041caaa093886919652983a4265d3f","ssdeep":"96:5yy7BrrIkpNd1AfTp68ZZyYxkueBmZfz5Rfkv8FSOD9q13rsGgzw2H8:IKrTjnAfTUMtauT7jfV9o3r8zw2H8","tlshash":"a5a17ca9a05586e70c54c21ab0efdbf264a325710ef9fd6f3163edda405062002c5faf","first_seen":"2025-09-26T16:19:50.832251Z","last_seen":"2026-06-29T08:53:47.871451Z","times_seen":30,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/logo.png","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 07:06:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac08-14d4\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"2da80035bfcca8b2fe307c8b261b5a1d","sha1":"95e5cf7a4fade4cca26af5c79d062a1ae08099cd","sha256":"19797dbc3a025dc85ca3c55f5b1a11e61ce064786699d4a2c8030bc25cffe607","sha512":"fecfadb7baf5642d2b41cc60ec81ae69c6fae2c31be9d8177ff82eeaa38cb56c07b4b82e1e20f9b90330f4788dd68182ee90ac2d1e1abc27e208844baed8c9bd","ssdeep":"96:/iNLN+LckyR0+AyF11D24hc7JE7373Ts9ejZ5minbNSXD15Dihb0zcMj4cpd7Uun:/i6wkyR0+xpVqdC/s9aZsibNSxclTMj5","tlshash":"21b16dcfc3b281a4dde45c371106f29e8f32861b4129595d04d2f9531c9cbbd8b225af","first_seen":"2026-01-12T10:38:27.115779Z","last_seen":"2026-03-18T11:49:34.318338Z","times_seen":3,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/events/list","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/events/list HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317890780.3404187311610093\r\nx-sign: jpZhK2/5th78GZ15HkDc5GMtY26aeaANm6v/TNuAYto=\r\nContent-Length: 39\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":39,"data":"pageSize=100\u0026pageIndex=1\u0026Type=LoginOpen"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 101\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=h2jxkwga5aggijllo45ntssf; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:10 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":101,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"30695ee25801136134ad0c4aef887301","sha1":"1b4d4d25a27646f1cca0c16649ce907d44eb7d94","sha256":"554c3c78979a68e9fd51bc9766656a46330cff8a2943801d861ffe55fa250282","sha512":"35ac645ea56d086cc4582e0daef4eb660ddb92fa21576a6ff1dfd49e1aadb6f5c14e07c0d7e6a3e46229d3acc61612d717c211918531d1a51ab3ca14af03ab0a","ssdeep":"","tlshash":"27b0120890191843f40dd00776633d031c8870034d16176d41fc131cc9a1c682582904","first_seen":"2025-09-26T16:19:50.860786Z","last_seen":"2026-06-29T08:53:47.945812Z","times_seen":15,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/domain/seo","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/domain/seo HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894680.16809090729901677\r\nx-sign: KxYOSkPrvpS1oWO9NGyT25TWhiK0hMPRX2npllNI8AQ=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 87\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=amn1y0bidjc4iegsskhfq0yi; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:12 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41677\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5298ef793a4ff56a0c1d067a491f3082","sha1":"8dbebad3a24303cfb629ed7ce56b652c7c7387c2","sha256":"2fec4b2c3622ac4bdbb195a3b1f650f8e9f9eec93ccac207f0fd8fb051c9fedc","sha512":"87fa94d4acd4e1a0ab4008edd7f127da385d41543dcbcc6ef953c774b0c136b9efe0e463cbcb8739244fa3ac0c066d371fd8125c38463ce91493b9230ed02338","ssdeep":"","tlshash":"ceb0120408e32863050942050810640920d06341554c4354d92d1c0d094c9c48286040","first_seen":"2025-11-23T08:36:53.386493Z","last_seen":"2026-07-12T09:42:40.748819Z","times_seen":16,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/bootstrap.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/js/plugins/bootstrap.min.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-e2d9\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58073,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57791)","md5":"9075742ee1fe2d0c1d47a431fda233e4","sha1":"1ed20f32fb45b9c9cd1fc1b7c58f422f9d0375c0","sha256":"e184f406380108ed797bf9d0eebd49b314d360f89882aee36ae771924a412e7d","sha512":"c5830538a6e3471bde73e49f27ddc7135ba7316f0f2cc1a48a4a8eb965f4387286643641586b662eefe74f1beb15ca89a854d77e043aff5d4a48d4c44a4a64b1","ssdeep":"768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGm:5NTKktDLmTF8yJL45XtHjoGm","tlshash":"9d43c90a725478b205df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T12:10:45Z","last_seen":"2026-08-08T17:39:45.640662Z","times_seen":985,"resource_available":true,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/css/plugins/bootstrap.min.css","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/css/plugins/bootstrap.min.css HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-22689\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140937,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"08ced6fc2d2ba709e65a14f9079386a0","sha1":"ec74624629bb9200c72bca9e7e71f291612df63b","sha256":"eedeca8f89b0c9eb14f1f5e375b1b793cf1eb2919df909769cd2b5e3cd9cd653","sha512":"c9effc5942e1b3fbd294ebb2f310c7209a46bf4fcafade3433efd4ea1db1a37ee2f6d2288d8b1bd5f56d860b94837fb412791374d61e534ba9fdd91a7a8dd995","ssdeep":"1536:un1QWSUPBT+QYYDnDEBi82NcuSEz/NvH/gIENM6HN26w:q1L7PDNYIENM6HN26w","tlshash":"6bd373a7f5a0312da467c61864d0bafe156f8285d7221ffaf42737644b895cb0a73e0c","first_seen":"2025-09-06T12:34:42.26164Z","last_seen":"2026-07-05T00:36:53.617577Z","times_seen":24,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/home-1/70x70-0.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/home-1/70x70-0.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-195c\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6492,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 70x70, components 3","md5":"2fa4d41fcc0bcda903dc2f631699e158","sha1":"46151d9c7d45c976f02b6e8a60c51e81bfba0d49","sha256":"375d4183bf93f96d3262e23c2a586903cde92e75e983042a83208fd516d05b47","sha512":"2d9fe61d572d5534ebd3b628b8877cd45c0170d972d9a644372e77f5765d89367ea9090a25a78add8e91ac7554566f143f6fc0d29e1199a2956812462446a6c3","ssdeep":"96:JQAxNKyfhbDsWJjLFcQ3aDejxsnjeZTID1b3YvTdlnbevwYcnPvM0RkO15GTw8Zr:JJxbbnJNcVCjeeuVYvTd4VYvf15Gfr","tlshash":"8bd18d15afc22c27d0f4a8333a83d006a6110dc576a79955b9c7de0a3ab4ef54ad33c9","first_seen":"2025-09-06T12:34:42.237423Z","last_seen":"2026-06-20T04:27:48.294476Z","times_seen":5,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/fonts/fonts/fa-brands-400.woff2","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/fonts/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/themes/zoom_jcw_com/skin/assets/fonts/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 74700\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\netag: \"69b7ac07-123cc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74700,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74700, version 329.-17826","md5":"dc83ddbbdd108b159117928063699c4e","sha1":"36960c9095be11315ea5f9031b3d489629268511","sha256":"30d34a03dcaa7bb6a46bb49960bd4d7648ca71068b0635da5784e3a1f9070ed6","sha512":"7873e9aafa4cdf6d1c4f5cd24a7d4e3e0f61a722b03b3db111ab809ce9e1c220168cc865509b4376481bf0b50123ee2426ce5c675e724079d6d057689033cab2","ssdeep":"1536:51JU1iV9xrtbcF0uiSAMg1IajnRRj0E5Fe9Hntj2jg7h5C:51K1MKOuipleajnnv5Fe9HgjOC","tlshash":"bd7302b268d2253950b32d35bc6e7c92dbcf9d4abda36f43d85877d785240eca1212c2","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-08-10T01:22:21.950445Z","times_seen":1678,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":445,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/config/sitelanguage","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/config/sitelanguage HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317901040.73408713685164\r\nx-sign: e/tCepkkBsblPH3A3jZvN49hWFrGAc0SbEdK5tuV3jw=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 301\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=0uh2kbiadrg1zfhxpva1qhi0; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:11 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41708\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":301,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1ce88ff6f9ea9c31338d5422d87596e","sha1":"f18983399447afe2cb60dac1b80179703655d907","sha256":"95360f623a8ad7003ca777770b728fe3c12b97ed3fcb58a4eee143255462eaa2","sha512":"4023c0a3eb70539600eac2f58a5db6e52f8e546deb915be7cea908c809cfcbab1a87dc8f64201b96ad2c533b6118a64b7833e7cf82f9de1fd1e777ddd2498e97","ssdeep":"","tlshash":"d2e02b0805291c2f37409fb2303f1c4939f820cb09d29e2ac26e1f3cc5cbc080067152","first_seen":"2025-12-23T05:43:11.660579Z","last_seen":"2026-06-14T01:10:00.598583Z","times_seen":23,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/fonts/fonts/fa-regular-400.woff2","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/fonts/fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/themes/zoom_jcw_com/skin/assets/fonts/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 145152\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\netag: \"69b7ac07-23700\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145152,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 145152, version 329.-17826","md5":"935ae23ba86e111411100dca037d2f0a","sha1":"d0454a905c24df15d3b53e046a01ab70fc8ce21f","sha256":"6f15cf39100feae2e2bf4c38f08b2d89701c3f04a2ad84a1d6f89bc70f21cf6e","sha512":"1d60a4536b0cea648e2a8a9eb6fbeec245559afde6c0de7f4157092c8b4ccf400051f8d8dd666a2316a817f8da7922a4cb66c361c9bef4d777acbad0aefb9ebf","ssdeep":"3072:Fmn0ddlwhYKiDxeD1CBVa2NsdzMzNehmLI/7SUAF1gEF:80ddGhYKidek+klemgpAXlF","tlshash":"4fe312576fd795a672fcf3105b7aa330473389ab12151f71a0e2bb546ed880f4a33458","first_seen":"2023-05-04T06:37:39Z","last_seen":"2026-08-10T01:22:15.259948Z","times_seen":1843,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFOKCnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmOClHrs6ljXfMMLoHQuAj-kw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFOKCnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmOClHrs6ljXfMMLoHQuAj-kw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-jcw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23672\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 17:57:47 GMT\r\nexpires: Tue, 16 Mar 2027 17:57:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:52:54 GMT\r\ncontent-type: font/woff2\r\nage: 147919\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23672, version 1.0","md5":"edbbd00269c18f7d0a4bccdc5cf1d89b","sha1":"1f918fe929578fab0dd8a7dfd0178ae4db6b635c","sha256":"5d0e978b6560631da2504e1612e91ee1ff959c04adae245eb320ac90cad2ba2f","sha512":"9aaaacce05eb5aede0162cf48e5ac76ab34c4fd32278e306710d80a60b6adfd17f23089c6552490cbfbe02bcbb160a3ec17770cbeb4dc7a0083406cd6bf15d12","ssdeep":"384:dPbDiVieKLJk2dTOcAaSftFo0JDKwqjqsVtsxXZ8HrIl07ZE1RBZcD83+gCIXStA:9eVQ7divaAFVZ6638H8CkRBuDK1StF9I","tlshash":"23b2e14cb447e2acafd798b13bbd47b04c30c4a7c10b8e9129cd83e869dc5914ee51ae","first_seen":"2026-02-20T03:30:02.278393Z","last_seen":"2026-08-09T23:49:23.96016Z","times_seen":1722,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":70,"dns":1,"connect":8,"send":0,"wait":18,"receive":3,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/money/getbalance","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/money/getbalance HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894660.5344802111360785\r\nx-sign: NIkQCL5hlBbB4LFEa2DsiZC4XL6sAoJVZk7XZUI6NnE=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=3oviwlse5dupxdzork2jqe5d; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:9 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41674\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1b4ce045ca07fbfe2e06a96b2d3d0bd","sha1":"d631871c78419a43637065fc1a3189e7ab513ed6","sha256":"bff09e855e8e7bdabe473ed190c95d4a0ad849aafc895e0fd3236bef796c3d85","sha512":"bbf830ad8db5458d4a51f3e3c11563533e9143c5c5ba99ff1987e0b8e12920ce9ddb5106a37311e63b472bd84f2d0f455395329c185cee96df2775650628fb78","ssdeep":"","tlshash":"8da00203295b7ac31344d98c28e65d952055795a99408728c89c105add5ca4fb696694","first_seen":"2025-09-26T16:19:50.816064Z","last_seen":"2026-07-12T09:42:40.787971Z","times_seen":33,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/css/plugins/magnific-popup.css","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/css/plugins/magnific-popup.css HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-1c86\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7302,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c03fe8704d90e35eba342d2ca2c5a530","sha1":"74a41372d833195b77dd9e167f82ca395cc4702d","sha256":"1155981e8193622f58553eed0bba2fa43512af362a3d54dedef64c46970bb371","sha512":"0de3ac5d97701cc10e70418347b307399ca94e3b2c2e5fee3ad8f30a3bd44f5fd119e669895495ce566011de827ff69dab617ca5b5d6d96c093a88b55e990d46","ssdeep":"192:NN4yXVw9SfoRyEBpEbxHq98Z/vzz/89aO:OSUL8xH2","tlshash":"8de1cf16db212342e537e7b5e7938729e7220063e30304abbfd15845ebfda484661fd9","first_seen":"2023-04-05T15:18:30Z","last_seen":"2026-08-09T21:24:22.575746Z","times_seen":8004,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/jquery-3.4.1.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/js/plugins/jquery-3.4.1.min.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-15853\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88147,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-08-09T18:21:44.236862Z","times_seen":5620,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/fonts/fonts/fa-light-300.woff2","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/fonts/fonts/fa-light-300.woff2 HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/themes/zoom_jcw_com/skin/assets/fonts/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 156896\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\netag: \"69b7ac07-264e0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156896, version 329.-17826","md5":"6b1c4bcb2a11d69fc64a61f889dfa1d3","sha1":"313d7b371459d715ffc4c18d483f8541b9d5747a","sha256":"b6eaf663bf99a31d581721a42668207bdc3d3db6ff33625790019f3682eea9fa","sha512":"cc10b547414bba279830a5e771b445830ad07c2f1f17e302f715deee2e14fd9eefd51cc08b14b2de2d5520a1870d945d99a3f33ecf759f256fdb20de0d82225a","ssdeep":"3072:nWtQ4YxPp4V0RtqoUCIPWY8Hoteh/f/Pz8Ad5EqLM2Ewd3a:nkhAamRtfUCIPW7Hdh/ne+jv1a","tlshash":"0fe3122df5e0b82dd360ea34b53a23a58dac5b76904da7c9c682e55df2bcd410f011be","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-08-09T05:42:28.872602Z","times_seen":1292,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":475,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/json/ENG.json","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /json/ENG.json HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/json\r\ncontent-length: 119626\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:13 GMT\r\netag: \"69b25451-1d34a\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:15 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41629\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119626,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8a8f3275a018b144d6a564b16b998e24","sha1":"f0ecb020d53dbd7c6462110aabd180937224f596","sha256":"1f49c7a23c55e37ada52495db253451c368a016fc99d51809318edda0547e029","sha512":"fb8b006e447cbe148048a30f0f96ba8d60cb414aafe5d625f8314c249883a93bfc314db4334db78186895e77e9b616869b30b649a5c61bcd463fc7e37b7bdc15","ssdeep":"1536:IUReib+wYRuYtur+pQrSnDpfw9al6jE7qA8L4iiaf72SC5l0P/3:I+eib+1tuDrGFfF4b/L4iiaf7JC5l+3","tlshash":"b6c32a4911895ffa8bc24396b5db6eb812b606b6b3d2242c8ce9f05c139c3c5f277359","first_seen":"2025-11-23T08:36:53.414363Z","last_seen":"2026-07-12T09:42:40.951009Z","times_seen":20,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/info/getgamebalance","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/info/getgamebalance HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894670.8101861145638428\r\nx-sign: r3yuOoI8bSqg44wMuM2mGIRa0l27n54kL1CnjKvZJ6Q=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=y53i0csa0en1b2xqb3zsy4au; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:1 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41675\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1b4ce045ca07fbfe2e06a96b2d3d0bd","sha1":"d631871c78419a43637065fc1a3189e7ab513ed6","sha256":"bff09e855e8e7bdabe473ed190c95d4a0ad849aafc895e0fd3236bef796c3d85","sha512":"bbf830ad8db5458d4a51f3e3c11563533e9143c5c5ba99ff1987e0b8e12920ce9ddb5106a37311e63b472bd84f2d0f455395329c185cee96df2775650628fb78","ssdeep":"","tlshash":"8da00203295b7ac31344d98c28e65d952055795a99408728c89c105add5ca4fb696694","first_seen":"2025-09-26T16:19:50.816064Z","last_seen":"2026-07-12T09:42:40.787971Z","times_seen":33,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/currency/CNY.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/currency/CNY.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2102\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-836\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04Snf61:13 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41719\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2102,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"f9b40734f25f70370f063cc2b2aebd7e","sha1":"ca21192c3f260f649d9394e2d9e834a3af732516","sha256":"289e988a4ffb88a5c04df57caacd05100f4c5afbceb05c3e464b3ff9c0f1d22e","sha512":"ece2d44d107448d6a01a6caa357d4f25d253ad779cf933f3721d3febdce933a0a6afc3796ce9bc48dc9c394a4bccf8c4f90fbdf3b58d1167ede80ea35006e72f","ssdeep":"","tlshash":"bd41d81deb41d442c408d833a4f2106fe7113c846ad8b873a8dd873f0c822fb6b84aca","first_seen":"2025-09-26T16:19:50.861919Z","last_seen":"2026-07-12T09:42:40.954858Z","times_seen":33,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadcss/skeleton-load.css","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/loadcss/skeleton-load.css HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: text/css\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-2bb8\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:13 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 151087\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41569\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11192,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a34e859eb54d8feba317ed219716e79a","sha1":"ed1edcce5f151af73e192c807f708810b5d5a6c3","sha256":"6413b270f0787f3b97c8046de8cdcd2549fcc3c07f5ac33fb46ae14e56b167dc","sha512":"db7baab74d328764e6ba556fd11e130726e00617b79a38cf33ff841073ef551f8e3c9e07d8fd8dedde9d7dbd934ddb292aec82db59602775282eaf545fc4bf68","ssdeep":"192:MW4xFiA97UgmJq6cFPhE32p343GA8iwAZ+143z34uS8hQ:zA97UgmJq/hE3M343NwM+143z3fS8G","tlshash":"be32d8b40bd518cde061a093f91a99c06f8c4437dd5af98ba5e73fecbf8a6c014a2475","first_seen":"2026-03-18T11:03:47.369397Z","last_seen":"2026-06-01T00:45:56.708083Z","times_seen":17,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/onresizeRem.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/loadjs/onresizeRem.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1432\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-598\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04a92226:14 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 168505\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41571\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1432,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"f2582d19f3d21f07913c1116075b0e3a","sha1":"6cd2f78b49680c4f750a632dc104116b3ba9a998","sha256":"9a83d7f070b1ff3b7d83bc1114cd8b760582c8aabf864d5ad899a084786c1c79","sha512":"8e3823d064ab863820766a7aaf369421d5fb73539a0f63f1a40bab4c3a69a2808f748a37286a5ea4e3581346c5b1159955fe43cb8c4714d351981019406a7c6a","ssdeep":"","tlshash":"cf21cdbc2be6143142236464397fe3c43d764017654b6646b96c8fc98ff0e818a62df8","first_seen":"2025-10-05T08:20:38.62442Z","last_seen":"2026-07-12T09:42:40.888151Z","times_seen":32,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/recommend/list","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/recommend/list HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317904780.20615405509277773\r\nx-sign: SSp8Gv7BUoSSzpxNTZqPz+0MxMGhrKRIqHg7mErZJAM=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 85\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=0skucuxc51xfbumbohpqkoe4; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:0 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41734\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1710f8a80d60dffd262da966b1557d7e","sha1":"14386ec708c979d426d41a853c857ed9418af40a","sha256":"a0bb1e27c046b9946b6cf5d3da89bfeea35a38c269451e4501f0caf0d689d4b3","sha512":"44ef9c832286a0520ec1e0ef9e53250c47e420990b36035db1d3de756928b8bac28a6449cfca5295e6769fef02e51021b50b5ec2626a01c8921694132b7cf59f","ssdeep":"","tlshash":"f0a022082c0b0c83388ec00b8c033c3308cca0830e080fbcc0ae2b8ccaf283cac02002","first_seen":"2025-10-05T08:20:38.635603Z","last_seen":"2026-07-12T09:42:40.762892Z","times_seen":29,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":238,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/home-1/70x70.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/home-1/70x70.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-1a10\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6672,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 70x70, components 3","md5":"ad4361ffa65f81c8937c7ff5ee946fed","sha1":"91bf882e2f695f604f3bb2fc270d5ffe47807e1c","sha256":"0f864943fb5bb1027c9ba4375e48627855f5df5dd12b17bc161ae51478561f7c","sha512":"cf3d9e1e337f757465794fadbf233df63f76de571b06d8491e89e281efb5327e27f2120af234672b60af396225497c657795081631edf4f5d3100e658a6bc4c1","ssdeep":"96:JQeKyfOdT9NecOJEPBO4RIUIOsB5Mv0vt9VAdSoCQLmDekjEL+mpBMpEiQHrI/CR:JqBYcOJEZO9OsDMctEavCBMqbLI6yriv","tlshash":"91d1af08ad405d11c5f6f0f283e1ee92f60e46523cebbf1459875c4074621792b66dfe","first_seen":"2025-09-06T12:34:42.248396Z","last_seen":"2026-06-20T04:27:48.325853Z","times_seen":5,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-jcw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:43 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 366323\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-10T00:49:16.501523Z","times_seen":258457,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":99,"dns":0,"connect":8,"send":0,"wait":9,"receive":10,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/info/maintain","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/info/maintain HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317890770.4811771532484279\r\nx-sign: 1IH98BwV9IVXCPFkWIzDmVQo1EtBO1X2m2ekPs2qh6M=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1641\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=rhl4wkqkftqyfs20iy4of4hg; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:9 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41637\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1641,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cf78bb9a76b2a9e87f4b8e45816f7f93","sha1":"a8eb8190d25d1bde5ec064b1135305ced1c1d9e2","sha256":"809825cfb01c749c26e8e9055b02ea4dc364846fca12f667bb803b0fb4238c43","sha512":"d096618aa345fd072b03ce70702b1a316a06c3b57fcc57c648c58612b3b456d215ca9af4c81febfb4f9a811fb360bb007f25a96353ab7c2550e3f0fcbe96ab6d","ssdeep":"","tlshash":"a431ac4f922e4cf65a04685a10df0b98fedd39c371ea5ed0538add11de5d0c8c027e26","first_seen":"2026-03-18T11:03:47.307867Z","last_seen":"2026-03-18T11:50:35.062065Z","times_seen":4,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/tag.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/loadjs/tag.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-16b2\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:5 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 168498\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41573\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5810,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"82bf7c6da65af90fbe37e26c5ef25a58","sha1":"866520238607474cfa7cb79775ab961720221a7c","sha256":"7098d573321c71fec0d44ebb7a1378596820e3a86d95fd20077fcda2a75da5e5","sha512":"4f422abc5b8a136fc805e9a5fa2b1ca3c4325b5e4ec8dca1f35621008d82337dbc28e20da5d235139013f7f861e6722b4e47e33bde8b021b1bb5708bf2466b56","ssdeep":"96:ZL9wIfDBXfAWbasRhlj0luz6ao57H4AQYJLtyw6HywgumPZVZ0jqlhxFLpNfeQuz:gaI6LRh90luz6ZVHNQYJLt7b7umPZVZo","tlshash":"e1c1a6e90e67a82166f7606b4f3fb118302700279485d4057ecdda442f94b994a7efdf","first_seen":"2026-03-18T11:03:47.372953Z","last_seen":"2026-03-18T11:50:35.056085Z","times_seen":4,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/region/get","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/region/get HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894700.9903839373947393\r\nx-sign: mIZ10ko8ycSgQDKLRtRz8Nc2/6vKlI016jW6+EsHitA=\r\nContent-Length: 16\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16,"data":"Name=FOOTER-LINK"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 47\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=u431rq4gbj3xr3qcc4gcutda; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:0 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41683\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1e225578de2c13ed9ecc75a61cf69eb9","sha1":"b03a0533a4587449a1b8b0f14252b3ac0275a54a","sha256":"f4aabb633bbd68d2400d009764724c3070471041c12701846ee2def2e290edfe","sha512":"25db0caaa2cd546890cffe5258fa4e9fe7bed143263b9d596c50bb647d2dba803417b635c75d5fe0e6920c9d06da4c69fbcadc037cf68930d709d928ec6014a0","ssdeep":"","tlshash":"53900415103754470544d11f043d35c570c550404c004fd4c11d134c4ddcf5c10530c4","first_seen":"2026-03-18T11:03:47.374542Z","last_seen":"2026-03-18T11:03:47.374542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":668,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/popper.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/js/plugins/popper.min.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-5039\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20363)","md5":"c055b8c12988ec2b1f7238d85e79f4b4","sha1":"5958a52438c8d753d692b11b5419bd1490c2655b","sha256":"58cb6a78afc204b7165e947c965cbce6296ee0e587fbab3e12c0d2b6378e9004","sha512":"b8fce0655dc9e77b23efdcec09eba16234eb2e59067b182ada5d01d75fee0f0c02f423063d47720a928a58d2edcd61582ad0c70bfeda75b7d4a2f4387970f848","ssdeep":"384:fYhLSLf4UzgCyKnxRsyPMbOXrEQAkxHOxvqAQD75zfS5vIXm3YzGp/ARdOgHhgzX:ILSLAUzgCpRMbcxHOxvwD7pS5vezy/Ac","tlshash":"8292b3dc3294b0a647ab91a7a07f960eb2335875610e9410f19df2d97c30ef9a13bc79","first_seen":"2023-03-07T23:52:11Z","last_seen":"2026-07-26T04:22:17.669522Z","times_seen":757,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/css/plugins/ion.rangeSlider.min.css","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/css/plugins/ion.rangeSlider.min.css HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-2b4c\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11084,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (11082), with no line terminators","md5":"ac462fe6dc626140e96b6a0d55b32de3","sha1":"e6d7c443c854e673872ce6e948689b35b6160e69","sha256":"0818b35a8e3db77632d006129a554589175a0fd7e0eb291cd210b50db5e423da","sha512":"c0207300361de4f072bbdac16dee41324ce24d49ad785fff0db157d792b6ddd4d1e1eb076d57c2c385d766b0404350d23e36125976b4442b5e8f23996d134f97","ssdeep":"96:mSdAhVWkl/wsFlAM0ZWFqlHfKTkFI3kjWrntt9VNn2QDIQ5OOxiQq80Cs9lS:RuT5XqQFqlSTkFwnt/n2QW4iQfT","tlshash":"9e3202b2e5a41019f127c0a571a0efae3965bd93e8534bacfd9dbb7482451dd3dc22c0","first_seen":"2025-04-07T15:57:51.57731Z","last_seen":"2026-08-09T23:29:58.58861Z","times_seen":3063,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/maigewan.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/maigewan.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 337\r\nlast-modified: Tue, 17 Mar 2026 04:05:57 GMT\r\netag: \"69b8d325-151\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":337,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"69bdf52a1ecd210da01ee35731f29cad","sha1":"cfecdf752f8115fadcf2409fbbb362f15eb90276","sha256":"e649b133500fff6d6f8ce83767de94d2840ecf375529ca910ba7bd5ce375367f","sha512":"cd86c4bb3ac49ef66b059621839d0b22de308ddc648d46a0dbfe4184863d84e47931bc7e183ad3457a46f32792c3396e69f9c0a385e501f49b697eb29cb2e5f2","ssdeep":"","tlshash":"08e026bf093710348262e09e31aaa6483af8a01ab612403a94bc84968dd8d9518f678e","first_seen":"2026-03-18T11:03:47.377092Z","last_seen":"2026-05-11T04:30:59.236776Z","times_seen":12,"resource_available":true,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-jcw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:43 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 366323\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-10T00:49:16.501523Z","times_seen":258457,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":118,"dns":1,"connect":8,"send":0,"wait":8,"receive":4,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/webSdk.produce.min.3.3.5.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /webSdk.produce.min.3.3.5.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-144fd\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04a92226:14 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 168498\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41579\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"f6bc23178310ba67f36a591b9dd5bcbb","sha1":"8a5e9002764f9c2f60a4f3bb8259455bad0874f0","sha256":"0540037cbf821c47ec2724c7aa3957069ba61482c8bd7013b325410a5ad2ba58","sha512":"53f852d6550ddfbc95e84e55097479644a9ededc607b06022e3894dbb1952693f95704d13592319ea4918c269285eb07409568e79b2d260c96a07925ac6e271a","ssdeep":"1536:rZSxL4lC4Ui/jdRVEBiZ4BPPJPkiN/CSEUGMl:QZb4H/ZRqBvJ/N/C5Ml","tlshash":"1d835ccdbac9753403e7a965d27b101173362411d9058228f2ece8e6bc3e5cb6167fba","first_seen":"2026-03-18T11:03:47.378267Z","last_seen":"2026-08-06T04:45:29.607821Z","times_seen":19,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/26.f6e287740e4ea85419e7.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/js/26.f6e287740e4ea85419e7.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-ab44\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:18 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 151086\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41630\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43844,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43812), with no line terminators","md5":"8509081d1f15763bfa64c030256b28e0","sha1":"67fc60f366eaace7b9b1367938403772e0521060","sha256":"9bc47472a18fa13dc585be8a485da9f9a3c8b032e66e92012daab999f0a5c2aa","sha512":"a01fd031e9043ef769caaced1a7afcca9e41ff698823ebd1e2dc5b1fc1158e0f107ac5cba9a2c68885dcc4d8e80f459172c57e591b235d8cb528246253405525","ssdeep":"384:4QnJSWtxrxbuf07JMo+yTXLjzJa5GytPImE2WMtlfK4UFEzw/FlJcXOzSez7bdpW:4YtpHjSiNEkRj2D1111911V","tlshash":"a91385aea04355784d234e6617fb977cb2b51bf3442509a2b73fdc824bc8938178e26d","first_seen":"2026-03-18T11:03:47.379821Z","last_seen":"2026-03-18T11:50:35.129275Z","times_seen":4,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/partner/mga.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/partner/mga.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 12319\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-301f\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04Ub762:9 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41668\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12319,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 598 x 118, 8-bit colormap, non-interlaced","md5":"0ddc35278a10242f9115a1551658a83e","sha1":"6677b716fe8345d9ffe415cfde519ab87eee433c","sha256":"defa20639fdf40459ed67efa8584903b5ae8aa41757337204c4ae24661759067","sha512":"0f913286ed122a90e18273576adfaaf4c9e435d4ff83d4a160c2fc606aa7ef437657420fea9c7d33a3329dc7f98fee023b54792416d08c93e55e6324355fc677","ssdeep":"384:Zx/7TFlv/zFkllHSXst83C1SlYPbO1U2NL6Cpy5/ZFFb:3/7Tjv7klHKst8AKYPh2R6Cpy5P9","tlshash":"0c42c0f44727b3ee0f47a556775e4d724786784cb020f08ae9c8a6950ea93d23305fc6","first_seen":"2025-09-26T16:19:50.8755Z","last_seen":"2026-07-12T09:42:41.052671Z","times_seen":33,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDI2apCSOBg7S-QT7pb0EPOreec.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/rajdhani/v17/LDI2apCSOBg7S-QT7pb0EPOreec.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-jcw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15084\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:48 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:40:52 GMT\r\ncontent-type: font/woff2\r\nage: 366318\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15084,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15084, version 1.0","md5":"98d75ef6878aa0544049b77bed867541","sha1":"e7d0d08b1ced5e6c424aa7efb0ea5c11276e4cf5","sha256":"23afdb9b5b89b878fab04d80cc30bf41bb4f3f7e8be88e5f16a7cc7671cdb2dc","sha512":"360ace65f75039a94a33a835761442eeb1d67d612598766375ea0715d577f09cb09e1ffaee5d3553d3832c7ce1d0915e7b79c0b4eb1c00129cc2a4f4117a2c43","ssdeep":"384:gyo8YAic7O+qBHVNtW4lIS9PqRDGr3DwKmQ7s9:l9JiiO+M1NtW4lDwBGUW7k","tlshash":"ec62d09c5a2e96b0a90e7d34847b6102b0f11fa7f5541fc9c10205399a0fe780edd4ea","first_seen":"2023-05-01T20:08:41Z","last_seen":"2026-08-09T20:13:08.950245Z","times_seen":3738,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":180,"dns":2,"connect":7,"send":0,"wait":9,"receive":1,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/fonts/fonts/fa-solid-900.woff2","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/fonts/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/themes/zoom_jcw_com/skin/assets/fonts/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 117452\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\netag: \"69b7ac07-1cacc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117452,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 117452, version 329.-17826","md5":"525bd4ae5b9eaa1e23b4a5c8b28c0d9f","sha1":"0985532515d580890822bd544fab4a7aea46cb33","sha256":"b5869f6bb9116c6dd0b6b691d57a17954f3c522cf9ae4497094e62146d8bac15","sha512":"b6eef4e10d2a2817f2c26702e7233c37e7810a1f8897c8cdb0d350dc16fd81ab59ed4edd60e0e1239076e15520dc5faa57fcba7f398b3fdadeaebd0b8022b94a","ssdeep":"3072:KZLPgc1pVJJoRhAqVq4sBvlHblJBFiGqDGTwm:K9gclJJkIB9H5JSvDGEm","tlshash":"39b312c0a3537ddeb86e18218d32e4e388953753edb046d899f99e130b9d68cbbc7150","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-08-10T01:22:15.270759Z","times_seen":2522,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":442,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/common/notice-close-bg.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/common/notice-close-bg.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/static/css/app.4d02f46248b2f35405f96dd8e3f13017.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1338\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-53a\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04StD63:3 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 39, 8-bit colormap, non-interlaced","md5":"c50f9378fae1eff41fe7216c7029057e","sha1":"6974183f4ca3c9027c960dd2ed5f57b5f273f9e1","sha256":"e5fd7b85e392b2c30ab51bf90b56b9f43c0248fff3c67c39a0bfc00510f1466c","sha512":"687ac8ade3493d4fdb60262e0fe6264e4a7a51bd6dd11ea2985fff85c7b0eee5fa561f9f752ada47bd11a40f632bd4d5b5686cdb9b80f0772451bcba6e5f36aa","ssdeep":"","tlshash":"f421a54bf98054c596a8e0c328ef005b5d23c8a4e5b1f09278cec85709712baa405ad7","first_seen":"2025-09-26T16:19:50.811561Z","last_seen":"2026-06-29T08:53:48.037597Z","times_seen":30,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/home/green-bg.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/home/green-bg.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 12043\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-2f0b\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04Ub762:15 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 133957\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41749\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 123, 8-bit/color RGBA, non-interlaced","md5":"e9958d2db530fb00f7528a0a84441244","sha1":"7effd051e4e3e1b8acb228539ec625713a25b205","sha256":"c2440ff0a066cac16a80b0de47b466bbdae9fd7fb68df2723e720047a2af8a23","sha512":"e853d76bf4991d5294bdc45210c9a176eaed6453e51e2f30859ec2dbb07bae0bce27ce865fbe67bd8fa3baec765fd2a53ad33d21908fe65c3a5c6f6c4a28076b","ssdeep":"192:f7FZuY5WRRKG1wJAq6y0jh+vlcf5ARrNgAgbsTorWfAmZS9mbu:frLwRt1MA6afiirWRZ0m6","tlshash":"0842c0c6f49d6b074defbe8158c1473ac1254cd5eac88a205c87adadd3d546c24698c8","first_seen":"2025-09-26T16:19:50.807711Z","last_seen":"2026-07-12T09:42:40.86406Z","times_seen":31,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/region/content","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/region/content HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894700.4655413107172074\r\nx-sign: UY8RiDEtKB2G3xsfb1AUSvTzgMAlWUrGcXvvBhyR8Jw=\r\nContent-Length: 17\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":17,"data":"Name=INDEX-BANNER"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1008\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=i444tcv3d3mss4zlzuwd3xao; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:2 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41681\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"912d207ef4d91d281fd7a2df09973f66","sha1":"fb295a49f1e18e681bebe11d3ccdc8005c3bfbf8","sha256":"979f178657897a0775f70154fa2cf9ba4564e0d6e0b074963aeb8fcbdb9c00a8","sha512":"476d41a72ba907142b493806acef7db4d174ea6e209cb86015e36969b17a783212415a335e5e006b6ebe8383570ee9ebcd06d612ebb966c58b43644ccb2ef03a","ssdeep":"","tlshash":"f311b49323e24d5807191a4019eee405c79c728fdac3de90b5588f98d2ff2ce62621bd","first_seen":"2026-03-18T11:03:47.38514Z","last_seen":"2026-07-08T22:55:51.810337Z","times_seen":23,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/news/list","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/news/list HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894710.6816423583142918\r\nx-sign: 4tba1kBYZDnsQUE6DTvcjD4L4EkE6g1Fe3kKH0fTZDw=\r\nContent-Length: 35\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"Code=NOTIFY\u0026PageIndex=1\u0026PageSize=20"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 86\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=0xpcwbywywxev4oxa43idkgr; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:19 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41685\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bc5f02c4c343267f956387879cb51385","sha1":"10c7a8089142fd8e0ec59f9e5df91a12e533d930","sha256":"0f614b48ff63259a33365211f9e0bf89b4c90c9b0695663e9ada8901ce52e1f3","sha512":"3e30f417c3703fe0cea8522eece93b199454d208b8c803a210c11ad9c496ce2f362b96624937cdf643bfc2f445242406c1a5d57a2bcc7895fb45bacdcda74686","ssdeep":"","tlshash":"1fa01108280a0c83308e808b88033c22088ca0832e080b38c2ae2b888ae28282802220","first_seen":"2026-03-18T11:03:47.385969Z","last_seen":"2026-03-18T11:03:47.385969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T11:03:04.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37055,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (320), with CRLF, LF, NEL line terminators","md5":"c6a0b781994406d527005512b410f409","sha1":"db4b1fa22158c646abcb202856e236f542d86737","sha256":"632c82f7423f06cf71cbdcd5e80eb55c9b13518a9339a42361eb0cc38257402a","sha512":"22bd67c9b68e9e607dc56999100be5e958f2608ac61a703b3cf84d07939a920310f72cbb5f708ea231f313a6f53ade6fb426a64ca0d787f24e3582dc43b26ae5","ssdeep":"768:HemXJtwOOToOOzwOO2eyuuSquuKL2uuScuuSXgNSJgzUaNDqANOgvs5NwNuRHOk5:HemXJtwOOToOOzwOO2eyuuSquuKL2uuC","tlshash":"7403cc2288f2536701d290d969712b6b7fd1a68bed9b420973bc0bc85fd7d8ede03119","first_seen":"2026-03-18T11:03:47.387023Z","last_seen":"2026-03-18T11:03:47.387023Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1216,"timings":{"blocked":504,"dns":82,"connect":208,"send":0,"wait":209,"receive":0,"ssl":211},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/images/20260318022030476415.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/images/20260318022030476415.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 17 Mar 2026 18:20:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b99b6f-11e1e\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73246,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 891x500, components 3","md5":"20f4af836637660d56996ccacaa84311","sha1":"e1219a53c042cccc1c7f5ccc8d663806118fd9a2","sha256":"07bda57e0a41ab5ecd6158c677b2571419d71c0d62b6d0f1fc472d05b0a9110f","sha512":"6cf36ef0cd39f389535f54ffac3ec3898748dec652687b1e2d68e367012349c64207d907ba2c01eabb1ba851e4555c6e3b8f0db24d7abe42bd00db14e43c1c9f","ssdeep":"1536:OB79ioQzli4lO7f3Oq+OIWnR2CyZeK79yade6OycZMzDgP1JrJpTNhXTCk8UM8VA:Q5ioWM4y3SWnMCyRTe63oP17pPXTCdR9","tlshash":"f2630167229643e266a4b3c83c9ace4f7eebbb3c50d1296f5bc166c237544f76948403","first_seen":"2026-03-18T11:03:47.388228Z","last_seen":"2026-03-18T11:49:34.31134Z","times_seen":2,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/home-1/450x350.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/home-1/450x350.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac08-3d72\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15730,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x281, components 3","md5":"ab2cc252e99dc2dc9dbe060d42493eef","sha1":"ca468d50d3dec2fafc5bb5e88cd12dcdb0b3bccb","sha256":"a6da5d3abd2df4d4e242f7e029babd83b4b3ce2a0a85a463e7cf1ff8b87c24e9","sha512":"7696774563f9793aaf016ebdb12399dce53782d95929ef63a702e2c73b1695da61e8fce9a521d26bbc06095771c8d7a2ceee1810388905fb72ff1600487ceadb","ssdeep":"384:0okhmdQogGWlNwFyIl+kB3WkX3d1qhU2vISw:0kwlNwFBPWQwvIF","tlshash":"9662c17b9aaad2087f24903975f643850394b21c14cfacb89c73783d616acfcd24847e","first_seen":"2026-03-18T11:03:47.389326Z","last_seen":"2026-03-18T11:49:34.371464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/page/info","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/page/info HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894690.918998381729703\r\nx-sign: UNj2PuN9lW+/WoA5o0wdBBix+3YTqMlfsW/OQ9I+o1w=\r\nContent-Length: 21\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":21,"data":"Name=M3-GAME-CATEGORY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1797\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=xvrm3bdmn22aaht3ijtddl1o; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:0 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41679\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1797,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6cb63ec225a231053626d636c01fd6cc","sha1":"9b2f4e3f2b30032d570e41b31385eb0fcc9cdce0","sha256":"90ca57cda516f7ab16380f1c6d4c669dff5de435c838ef3d060fda16808f49ed","sha512":"33a2ef431737b80c04d5bd9972a7558fa996189f4543d1d149cc2f89e588e436b58adc713dd90801018783445a09199058d6f59ba982c87933d0e237a84b0eb1","ssdeep":"","tlshash":"27319c72d4630c350b1f2a5000cd6c8de1ce63ae85c9de66fc1cce8b91afa49616609b","first_seen":"2026-03-18T11:03:47.390533Z","last_seen":"2026-03-18T11:50:35.130938Z","times_seen":4,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/service-details/80x80.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/service-details/80x80.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-1c72\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7282,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 80x80, components 3","md5":"dd94051eed5040ea88a9f7f28ee69e15","sha1":"a2443e2b8385316ace78e7e0c5a1f996b75503ed","sha256":"3fe51dbc56bb4269ad186494e40f007f1733d17e541bd974e0851fa5db9bce50","sha512":"6f39e29aa2d600bf7c02af0ffe7df751272a2b538092a014d25427507a8f76b2195b774383c42a8bf4b28020719efefbf11ca4c7b3704ae00fade55ea786db0b","ssdeep":"192:JFeq7VIALMXoYcvSITO9XcaJAchHcoQ1EInz3ur:JBVSXrK7eWcVlQ1EIn6r","tlshash":"0ee18d1c9f706c02fae9c634a193d1799a2a2c60e4677f16750ab540b0d55fe580f4b7","first_seen":"2026-03-18T11:03:47.391724Z","last_seen":"2026-05-16T10:35:01.104445Z","times_seen":3,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/isotope.pkgd.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/js/plugins/isotope.pkgd.min.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-8a70\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35440,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32001), with CRLF line terminators","md5":"346ff983b45d55144d662dc9f9bc3248","sha1":"6cb300d4a5067d7ceb71a9f5d477199a039d5b61","sha256":"7b3c21955dc6870eac447e3b6f2704462b1e20ac14a93c1015034747ae0833fb","sha512":"31c0450b3f88e08915af28017c596018ec9b02cf4d8b648cffbfbd479b5327a32f7f303a91802fa44142b9d52ef78b6e91ff43e230864470be9bd56942189a85","ssdeep":"768:PAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfyTSvDz231Fxk:/xVKDSfJP4Nnmc6FuCshD6cD6ZaTODzZ","tlshash":"7ef2c84f73403924468bf166966f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-08T07:23:26Z","last_seen":"2026-07-20T08:28:12.911994Z","times_seen":93,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/fonts/element-icons.woff?v=535877f","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/fonts/element-icons.woff?v=535877f HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/static/css/app.4d02f46248b2f35405f96dd8e3f13017.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-6e28\"\r\naccept-ranges: bytes\r\nvia: 1.1 PShlamstdAMS1iz29:5 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41663\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-08-10T00:30:46.7216Z","times_seen":29383,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/images/20260317022029738108.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/images/20260317022029738108.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 18:20:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b849ee-c6da\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50906,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x709, components 3","md5":"4c4bb00ae50b9a4d16216184962514e2","sha1":"8bd4f50037c0e53a37a8e067a3d6594640f3e49d","sha256":"9983e54101a27ee3589703186c4706755d8e20a7a5b09ecf03f33aaed1313426","sha512":"30f2f314f0fc83eb60e924b67804b667953c0a4139d714ee40533415d12f34c8d2852b44018232af569df025f4f151dd3aa4cdd1adc825ba037c855fbe4c6953","ssdeep":"1536:bhtqSm/yOpUOneOJk9RdLpw4YbBmmxt/U:eSmvpUOnFJkdG5xt8","tlshash":"3e33016a871352d7504aac0ad34acbf873ca17465bf88a912d74cd8f970c78ba016e5e","first_seen":"2026-03-18T11:03:47.394281Z","last_seen":"2026-03-18T11:49:34.35687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/slick.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/js/plugins/slick.min.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-a76f\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-10T00:54:33.607886Z","times_seen":110837,"resource_available":true,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/main.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/js/main.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-521f\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5b7dd0699fe475fc2787494ddae7540b","sha1":"9c7effb2ff1eede4b969c5548cc5a0db85488ff3","sha256":"dca50a257a3218a9d48a050e8c18e3589cad6b6f10e92f154e7eb41539b5933c","sha512":"ec2915edad25847fd4df0d8eb989701b4d7f4c669d196da835106a7da8ae5c5a266762d401b84337beaa0ce18d3ae0998c83f2db832fba3e60ed4580016f655f","ssdeep":"192:76A0K0SJR7g/WvW3NImPW85mmEJ1zk2PLE+NE+rJkE+NE+rJWE+NE+TZbJpE+NE5:WROJWKBNBKBNBcBNBNBNBSBNBRBNBc0b","tlshash":"1592aa0adc1640ba087fe37edd66d20aeb97932302458693bafc55480f7015662ddefc","first_seen":"2025-09-06T12:34:42.227435Z","last_seen":"2026-06-29T08:36:52.814724Z","times_seen":12,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/js/plugins/jquery.validate.min.js","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/js/plugins/jquery.validate.min.js HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac07-5f3b\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24379,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24236), with CRLF line terminators","md5":"161437e6bba9f0eb5288c1772697125a","sha1":"50c48978230c9ae8bff251475e899f4c60bdc2eb","sha256":"f1db7f1a0de6de70db59c069c2ab3058138a602cc2fdd16a6be72645b6dff031","sha512":"fd71c25d4cb106ff75d8f50f279108932099b42d189d8c40eb2c8f385d38cb6d189c5fbdd5fcf4713c6e517799250b67de9729639992658cae6133414375c908","ssdeep":"384:Q69rHpoLFWB6/tX2lHJdkMiYnFpg5SLwaE2fSNAc0Eny+RWuK7NeB2wV/vtrx+OE:+WB6/8lHJdkMioFpg5SUB2yQEny+NNxO","tlshash":"80b2b78976d671065e9720f4509ba60761b669a0e008e83cb5b8d4d2bef4fcc50f7f78","first_seen":"2023-04-06T10:18:41Z","last_seen":"2026-08-07T14:48:11.566562Z","times_seen":401,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadcss/index-load-progress.css","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/loadcss/index-load-progress.css HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: text/css\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-10ce\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:5 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 151087\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4302,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9fc3a76ccfd59d79cee468a438777630","sha1":"457ce462c7ba0a5758450b0c263f5041247404ce","sha256":"48f646091a1656bb5a392e039bd26dd811e2ed7947225ba003adcd9ceb9c5387","sha512":"b2bb7e624f210b19a0c032a41d963d848e53eeba41ae71d015adcaed0b739cd3c07ae0cb6e8e97009160f82e3f71d62ca55e1857a21c2aaeaf0c3c3b3923547b","ssdeep":"48:oTg4CMbtmr1AMpCCWTwBRNdwdudx7dR/CdRjlxo2dRTJjDGdRddhAd+kXk4kakwA:oCsyMCWEziEAURGV7B3sYN7ZI2UNXUu","tlshash":"eb9189e19e650b2f78e6d85428960d93135b4052894fe8a8efd6b02ceedb3942c5f3c5","first_seen":"2026-03-18T11:03:47.397851Z","last_seen":"2026-07-12T09:42:40.778553Z","times_seen":27,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/log/logroll","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/log/logroll HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894720.39056378905312905\r\nx-sign: gD82XhEGNiTeeEbxg5RVvD1AcAg/Jig0KQmgQllwZSI=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 4139\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=5dixdx5pgjc1gctzoua04qgb; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:5 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41686\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":4139,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b92773e15e4254c691dc028ea42ce03","sha1":"816165bae91dcf5b195608b08b787de68bbb3362","sha256":"28f6600776ce1bd1494f84308d2987001192302dcdaf845ecedfc7eced2eca48","sha512":"95d0097e6281bc16c525bee9c89dfbe3977ccc68cf000e30a79f5614a289e5cc49927b3584a1387a12cfd4c5f28da2460e01b6b6e4d9e08e587ffbfd80bf1189","ssdeep":"48:YAESsIlbEy4FDp/eESb+EyYiWB+Ezq1/EMiE8LEShE4sEFs1JEXtkiEAiEeIEqIJ:3bBep/ekHfubHccs/Otbii6kMexpC","tlshash":"5081e51f36ff2df81fd49ad6e3ca1b27b41d712109068689fb30d8088aed6a5d978345","first_seen":"2026-03-18T11:03:47.398828Z","last_seen":"2026-03-18T11:03:47.398828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":880,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/language/png/ENG.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/language/png/ENG.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 1612\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-64c\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04StD63:2 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41689\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"58855556336c0d7983a4056842b34cf4","sha1":"188371a2710287fd627ceb303dcbd47fdc5f252f","sha256":"401143a1d7ff508cfd97e256cf7595e241ea3b51ab8b9100be9b34f10b949a89","sha512":"711d758a0d5d8d4655f114f481dd3b0b249b8d6853a5ca524ee7b35bf794a9c4e364073a133fffcffa326c05d3ed702087fd4594b9a214e57e960b20f8571e78","ssdeep":"","tlshash":"59310a93d8854e50d67c5239c0ff75933a6077291ad2d54d0b05431c3a36c8b9152da6","first_seen":"2025-09-26T16:19:50.833854Z","last_seen":"2026-07-12T09:42:41.063076Z","times_seen":32,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/app.553e32f2bc923bd0f9ce.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/js/app.553e32f2bc923bd0f9ce.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-1d8b5e\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:3 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 168504\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_10059-41577\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1936222,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64992), with no line terminators","md5":"9c68a5e19629d328aeaf4b076a26c76d","sha1":"343721cb29dd311a9bdd6ac767f464be40926097","sha256":"906d413bc8e0436aa2bc3ccd7ddae94c3140d486126c821e13379081952d2c34","sha512":"c2f6d28a135c8d68656938c6742c2b4a250d304347dfb1ae040d4c89e1095b548d850b7907e5085e6e16c8d4399eebe601693b20453df4f931b1505603a529eb","ssdeep":"12288:73ySxA7p5709pbo9IsKopCfploYq/9AUlHU3B9B1IfseVKVofekXbrm4K8cZ9x4z:DlTveVK4qtWhSmfVHr","tlshash":"82457c3eb28975b84d522611301f35746db52ea7f906c0c0babcc9c667e4e58821bfbd","first_seen":"2026-03-18T11:03:47.400653Z","last_seen":"2026-03-18T11:50:35.082425Z","times_seen":4,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jcw.com/themes/zoom_jcw_com/skin/assets/img/home-1/540x350.jpg","fqdn":"zoom-jcw.com","domain":"zoom-jcw.com","tld":"com"},"ip":{"addr":"154.85.148.140","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:05.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoom-jcw.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 07:00:00 GMT","end":"Sun, 14 Jun 2026 06:59:59 GMT"},"fingerprint":{"sha1":"AD:9F:B1:2E:F1:46:BE:61:80:67:E0:A2:A7:A8:70:B6:A8:7C:E9:A7","sha256":"85:B8:F0:9F:FE:97:92:A2:FD:66:80:67:57:0D:C2:2E:37:56:CB:EE:C6:35:37:9B:8C:E9:4F:61:1E:76:0E:F1"}}},"request":{"raw":"GET /themes/zoom_jcw_com/skin/assets/img/home-1/540x350.jpg HTTP/1.1\r\nHost: zoom-jcw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jcw.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac08-6cc5\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27845,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 390x220, components 3","md5":"2ba520ad700262838743dc420aaa7443","sha1":"551fa40bb49382e4877f62c7a31e29fa22c356fb","sha256":"05b551827d89b43960d2d7ed8fb44ceca0bc233539ebad71058362568a65a2e7","sha512":"42e7484f1c379b8316c6e3396364aa9ddd416fce483dad25efef633dc42e6362309fba9db9e615641cd9ea449c8cfdbae8f709d05d56f330adb4c4e85dcce698","ssdeep":"384:SnmCRhQhzZV+NiHdh4jAe4CprGhEAl9JvKLwvuJHPHEKZIoYjupWCRZuLgSePQc0:omCYTNwo2YEWCoSgz","tlshash":"47c2e1c609eefaf4625159668cfc7e2632c65cf2413cedf56ad1683c2f1b931464b086","first_seen":"2026-03-18T11:03:47.401793Z","last_seen":"2026-06-09T10:06:54.660807Z","times_seen":3,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/#/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://zoom-jcw.com/","date":"2026-03-18T11:03:07.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoom-jcw.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:07 GMT\r\ncontent-type: text/html\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-125e\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:1 (W), 0.0 VM-ARN-01Kmy5:5 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 4216\r\nx-ws-request-id: 69ba866b_VM-ARN-01Kmy5_10059-41566\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4702,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (717)","md5":"c288e68366d08413d91f10e27f1e696f","sha1":"cc8c790bb98cd267db3a1839248f57d5648399ff","sha256":"03c9dc2af1eb8675be73b08009ae7c2fe000453cbf17f202e5b799c6018852d0","sha512":"1bb1b78d5a76b6de983141dc2afdcf390d134983886f4a7c7f14dbcec3a2a2d67b0fb2a757b8d8426017c98a65380aaaea18bd9df1eb4b94903a3d59489d0b3c","ssdeep":"48:b3Xh9PBTXl21zMiDv/qt9SHi0A5QDwUnqFOl39VE/Md2IP7xAPwqhKYNlrOGl1Fz:zz1Xl2taf/QEufQf1IYvr1tWPV/Gzow","tlshash":"49a162791e42c035215398a82b7bd2417899f127a204c800fdece5dcdfd4f8a4dbbae9","first_seen":"2026-03-18T11:03:47.282236Z","last_seen":"2026-03-18T11:50:35.119663Z","times_seen":4,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":53,"dns":3,"connect":21,"send":0,"wait":23,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/page/info","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/page/info HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894690.3197029637235458\r\nx-sign: spAsB765s7gGfh79Bg9iT8+445A4+3B6dRD7HzsA7Ao=\r\nContent-Length: 16\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16,"data":"Name=HEADER-MENU"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1461\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=s5pr0xhqdzdtkz2hw4me2sf2; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:15 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41678\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1461,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1379c36feeef04b155b9ba76696ec48a","sha1":"67ab43599d45573454662c717aa7542738dc0a85","sha256":"b89f6b24d9d9718ed24256f4a6e8174796261b54c3651cf68cbd408bbf9947e9","sha512":"cb14bb6f0324151f6d203df0d46e19ed48ff911e213bceb2979f43e6ddd4ea99dde449c006ca56fb0e0ad37e47f784af5bdb0c0d462bcccdcc0fe04510e897ab","ssdeep":"","tlshash":"af31086291671ca9061f1a9000de584da0de63ef84c8cf5aec1cde5d51afa8996a6093","first_seen":"2026-03-18T11:03:47.402646Z","last_seen":"2026-04-07T08:47:39.596323Z","times_seen":6,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/page/info","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/page/info HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894700.8941699293213096\r\nx-sign: avl2eONTU4t9UOSNR6QA80C6Ooil+3WCKO6C3+Fz7es=\r\nContent-Length: 20\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"Name=COMMON-ENTRANCE"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2432\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=fqdxawmetwh2a35ss1yz1ptu; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:4 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_10059-41682\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2432,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1ef4c0f77292e78364949d358b4d157a","sha1":"29218650be507e6dfa66db05f1318d18c6119961","sha256":"9e4edfba8ddb09f2633207e41fbd039ccc5b0495bd05a3eba5d75c8016463a0c","sha512":"33a6fa02ed5ea597694712a19ce9665c9d9a532f4c632ade617f4a6ea78dbfa17b0c9348f4204d90f90fc0a147cd2c2d7fe05baf63040c9daf67c600b0fc5011","ssdeep":"","tlshash":"fa413ba2d5a70c64064f1a5000de9c4db0ce67ffc4c9cf5afc18dd9941af989a6e70a3","first_seen":"2026-03-18T11:03:47.403449Z","last_seen":"2026-04-07T08:47:39.652521Z","times_seen":6,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/config/getcurrencyrate","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/config/getcurrencyrate HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317904060.5775581067462224\r\nx-sign: oLjcmVmSG/De/+yMDDt3hTiWKBdlHkE4fYNGBADhfPM=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 3963\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=yn3lu4hyde0l5q5b3w4unl2z; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:3 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41726\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":3963,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1daf033d751c5f7ca15a8aa98eb8edb5","sha1":"3ff61dbc09dc487e7e14ea2c643b236d464e3ca7","sha256":"dc198292bc573c4c6bbb69b49b7c2fce10d5fbf2d5fd958e536a4b4fa97daca9","sha512":"6b69467794abbcee647aceb8426327b438e2dc852619c8deecf7179c7f342dc5331baabb9155cbd47864b794caf6dff2408838f3e8a7a7232da18016105e1244","ssdeep":"","tlshash":"6381d98d245a18b5c9e35ccca5db6021172d73dbe4c38e774b9e1fec1260d63540ee6a","first_seen":"2025-12-23T05:43:11.644518Z","last_seen":"2026-05-11T04:30:59.380589Z","times_seen":14,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/info/getlabel","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/info/getlabel HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317904080.9431011173401117\r\nx-sign: k30Sx/W4GbKEZaGWtMDNEW23H+X1nPg6VozCzq8qGeo=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15524\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=tfd4td01qszvrerjviefzzys; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:19 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41732\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":15524,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"21c23accc7bf2ca3b5f0862981d6e598","sha1":"c09b8eea2decb742d5f8dea35fc66a4c713fd737","sha256":"2b17e553c5ff4c419efcd9829040fba49f9dd4870dc224900a823692411ca9cf","sha512":"bd9431c1f7028ec95a40acf53663de4197762bc987454ae787049575183c3312866d4215aedc957a60b98708ac6f2167b92bfea5cf58959bcf09deeec0c48c23","ssdeep":"96:fLfcAmSmrQqHHFINXutQgeTgLmi5u7eQDjjNuQCe0q/Va4RSUmXu8+4VFabd1dE+:D0YuagKiWHCkixyWw3d9lZi6c2Q+m4","tlshash":"8b62a36b03db6c8f0b665ac038cfa80ce44d119fc5c6df9da12d9e1da6bf1a650ea441","first_seen":"2026-03-18T11:03:47.279779Z","last_seen":"2026-05-06T01:07:03.423019Z","times_seen":8,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/recommend/news","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/recommend/news HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317904080.28511591317254015\r\nx-sign: Ad9guH7IjmeWnxoeTBHT9pEsNGjmSNWs/yIGCFjiGhs=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 85\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=zcklwpw352tv2jqd1i2limy0; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:2 (W), 1.1 VM-ARN-01Kmy5:5 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_10059-41733\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"de709b165641e633f1e4503121076374","sha1":"71c587dabdf01da8d9a2c411ff3ede8e3488e991","sha256":"d396020674a6479e0e00eb785856a43319c967dff6ee0ff3324b105ba58de8fe","sha512":"a912f75258ec490b9d31b1ea147d3747dca3e945deeb9a5228dab8d544db43a9ec9869bb75403a4e30ae450f4f1bce9be8d24b30e4169a8b95c0a5fda7b594a6","ssdeep":"","tlshash":"fda01108280a0c83308e800b88833822088ca0830e080bb880aa2b888af282c2882000","first_seen":"2026-03-18T11:03:47.404299Z","last_seen":"2026-03-18T11:03:47.404299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}