{"report_id":"b0465b68-98ea-49fe-a86a-f52af9b1e45d","version":6,"status":"done","tags":[],"date":"2026-03-04T11:42:19Z","url":{"schema":"https","addr":"wvv-6339.cv","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.200.238","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"title":"usdbet官网西甲皇马\u0026巴萨体育合作伙伴","dom":{"size":12532,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6535)","md5":"8639b733beaff5f6252d8770d6c08f3b","sha1":"22e7729574f19319cf08f7b9764e8abe0ebda6d5","sha256":"b3376aeb9dbc0a23b212c70ebffee81da05b0906e80149aeb78664bb6433ec14","sha512":"9b500bfc5af5bb7d8ad07d6cb1432d2f029a7a94ab0dfd78bc8f4aab768969333f36b482ca88866c4060ccecf54a575cf420c5c7735e073a74ebe8a2456f41b4","ssdeep":"192:Wj+GKB1E51N6mUq+99EGnBZbIJvfpD+Fku1VdtVoUR3mbA8SdI6:lG81E53Uq+99EL6Fk+VdtVoUUbTG","tlshash":"1842c9a1ca20103cf057aa59e7c37f45233880139613bcb9b7f159bd4ec25d792a6b8b","dom_hash":"domhash4295885fd6d73b8d8469407e3280c506","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"wvv-6339.cv","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.200.238","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T11:42:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"x746p7mo.hygutsf8.com","ip":{"addr":"13.248.188.234","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2026-03-03T22:05:32.617881Z","last_seen":"2026-03-03T22:05:32.617881Z","alert_count":0,"request_count":3,"received_data":21813,"sent_data":1629,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"huf5as.pham.xin","ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2022-10-09","domain_rank":0,"first_seen":"2026-02-12T11:57:30.68244Z","last_seen":"2026-03-03T22:19:59.116312Z","alert_count":0,"request_count":95,"received_data":13208267,"sent_data":45348,"comment":"","tags":null,"fingerprints":null},{"fqdn":"2o9o7qal.3j1ai0ll.com","ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2026-02-07T04:48:41.499672Z","last_seen":"2026-03-03T22:05:33.252446Z","alert_count":0,"request_count":9,"received_data":1807218,"sent_data":4210,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"wvv-6339.cv","ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":15,"request_count":15,"received_data":1246420,"sent_data":8817,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"cf0aad09d2e7287c48d72501c4ed8cbd","sha1":"7950b8c00d5a278b662dbccd11af31398a408e51","sha256":"72512199b29d971b5fe854b1f610604dcbdec2c38666c106f1d15863e0df32db","sha512":"2c1680bded9b22be2e6c38d76e46ef67bd438c6c9d99c804f9dcb77ca30bd5aa6f090c89a51205cc7efb466040a171eaa318ffe6fdf046c924394ce7867218f7","ssdeep":"","tlshash":"75d02b4472e3280c08f22b214cde250508a271b610484d08b10ce9d64bb5522b97773c","size":278,"data":"","first_seen":"2023-04-14T20:29:13Z","last_seen":"2026-06-07T07:30:11.57416Z","times_seen":13043,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9846b4b0c961f85e4c150bd29f4b86e1","sha1":"adf30369fc215e80b26536f1e24a1824ad3b81d5","sha256":"163a003d567f6d41f861d978c558eced69ed2b25c863055ed8171eefa350784b","sha512":"cf37c88b0608cef82c3627c952577e291343b8f63323da2dd77b34ab0500d5494bf377f85e968cb058124ff32345f184aeea9447eda67d9e887d688e2e5c81de","ssdeep":"","tlshash":"1c80000a8c0088cfac038e00803c00a23acc202a0022c2202a00a803aa00032023a0f2","size":29,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.574937Z","times_seen":9745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"37f0336a6fe3f56c661b149ecf659efe","sha1":"9aff4163d5da3b8d760f0593c583dd8d1f6dfc14","sha256":"f33f7afadc5c318efdd57d35da2dc2aebe39fd166a61905ce37b9f7363f51c2f","sha512":"d24a42f5f1834957e5616b5f61d52db98c3351e5ab3346f1fee8e7ca6ba62dc7c51f4ae645a8dd403194e2df3f8d2ea2c3b34d371a67dde201979552033cbace","ssdeep":"","tlshash":"279004510f71113ddc305157055c13747050c13ddc1ffcd43413d57c04741300011401","size":48,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.575592Z","times_seen":16886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/layer.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb96339625e9d456e32f86cdb3c7a7a1","sha1":"1301165c58bbb13c542cba493b7ab5774e87e31f","sha256":"17fb047ba6828fcbdf2ca226fa4594cfded2b2fdfeaff89a5bd81c7cf0359919","sha512":"53083bf4d6d450b1e9402c3f3dc40fb3434a27d47fbabee51f4ce1d3577f2a0aabe90cf5f6dfc22830a3878ec7552a6bf6bff605c82a4f832c79f34f7657ccef","ssdeep":"384:r1dCih92A3DgrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:r1YiV3D+WtXItqF13k8","tlshash":"6aa2b76a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":21994,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.489421Z","times_seen":17440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"07e2be932f4d6e838e25e45589fbf7fc","sha1":"0c3c252699af003e8dc432b3317feac1966180c0","sha256":"83b4d302d49aee98f086788dc18bec915aedddd8a0f36fc7b95b53ed1e145010","sha512":"9c8814e0e1b282e7c3fd404166213ed57d99e403046d9c7d81b042ffc803c89d744b3552416363e0b018e6cd3f63cb0d1fe7169796cf89b948129fca75a42b87","ssdeep":"","tlshash":"a9c02b30369370520383d07018ff37040d0f8f03a8182089b27e51d45ff0a8e1853d78","size":157,"data":"","first_seen":"2024-07-04T08:35:13Z","last_seen":"2026-06-06T23:55:15.798835Z","times_seen":801,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","size":32679,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.487698Z","times_seen":17749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2dfe7db95be9792922530c88ef88da4","sha1":"fc992fc77fdfa4abe3570569fbdc53a1c5714c0c","sha256":"d05ab645a69476e9a8ba932b58907e3d8f103bf23aedafbe3e76b27f4a22358a","sha512":"99065782830b3e3f013910fd9aa795fd6b341e7892eaec200ad05305920552798f2446dad45dd254de8185095f36af246cee24052b58f05eb17dee20d59b5abe","ssdeep":"","tlshash":"7f210e524f048a9b77cdc7195060241c6ccca06fbc94b988f6ce9ba70f5ea9e56fd083","size":1279,"data":"","first_seen":"2025-10-03T11:28:12.468736Z","last_seen":"2026-03-15T12:05:04.391268Z","times_seen":1669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/float.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"829af863b0cdc4a603919824ae046299","sha1":"1d417b1553e4ecb7125ebf2005b74255291fbf73","sha256":"1dbe4afbc9ed220c08b9e95577b56f83e2e8e0f7620c5dc18266bb325e5bb271","sha512":"e1202fa26fd353dfb2f989d3d45512e0691c062076297399f5fe62f63e7f5b194fec4a3d7fe2f09be1a6a945e197e7d68445d33dcc6f80b23a315112d9ae5b6c","ssdeep":"96:G4SXFXVXDL+R5NxuHie/moRUgIm/Kv3RKXg+Iw3qCNv5IC80b7Yr+HpH:G7xhDL+jNxzeBVLKJ1LeqCwCxb7YspH","tlshash":"04e1506e03b1212195aff1beaf1e424c6631905b2507dd057e0c87c46fa493c4636fee","size":6959,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.51234Z","times_seen":17483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/lazyload.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d87854586672bff7f886a47da85da5ed","sha1":"8d0537030dc7a81ade87a41a75fd5a75e4e33da1","sha256":"17859187f895c27de8869fb6bfec579fd68c4588d0af71d08d334be92d144ada","sha512":"d8c3e724f00bcf1ebfe1f8e96dda01243cf22aef18a0fc5a25a42d84458ff58a22a316dabf1d80d1b4f4c28db79edbdf9ba19df755d72f2b0b9f64497137672f","ssdeep":"192:Cdr+EgBD7NiM7B1wV20jSCQrF/bcbe7/bgdCx4RTsmS3KDsS3CggvBSChKRJ0Suk:Cdr+JBDYpV20Ez+obgdsm3ROCJIqSJvG","tlshash":"304200483deb51aba1d3b0f89a5f11447235810b160eee253d6c9395af6093932f2ff9","size":12053,"data":"","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-06-07T07:30:11.549562Z","times_seen":17242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd4be3dca20fa6d632a1c804023a5f95","sha1":"d7ca8ffc44755bca0e9741489b81ee47cc491976","sha256":"059620520037e2305f2e9d55b308839a924610616a539a28f761a90645bd333a","sha512":"ab46fed17523c0225834af693ebf0a04a46a1ac6959224147a21d525632976c2054e02511a37ae44a2dcef164a76ef9f8ca2ea8aef2a088958424d1b63970cbd","ssdeep":"","tlshash":"19019e215c7a40907c401350136b7b0cb662463b5e81e245721e5f51bfd6daf52877de","size":704,"data":"","first_seen":"2026-03-03T22:20:04.233773Z","last_seen":"2026-06-01T10:33:03.45759Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2dfe7db95be9792922530c88ef88da4","sha1":"fc992fc77fdfa4abe3570569fbdc53a1c5714c0c","sha256":"d05ab645a69476e9a8ba932b58907e3d8f103bf23aedafbe3e76b27f4a22358a","sha512":"99065782830b3e3f013910fd9aa795fd6b341e7892eaec200ad05305920552798f2446dad45dd254de8185095f36af246cee24052b58f05eb17dee20d59b5abe","ssdeep":"","tlshash":"7f210e524f048a9b77cdc7195060241c6ccca06fbc94b988f6ce9ba70f5ea9e56fd083","size":1279,"data":"","first_seen":"2025-10-03T11:28:12.468736Z","last_seen":"2026-03-15T12:05:04.391268Z","times_seen":1669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4704348a8f940b43de3f4665228f5114","sha1":"f1dfad19ee2511b010acdc3ccdd2229ef9abb35c","sha256":"50fb27af19d01bdc80489b5958906e1d1e9d16125bb4c33f54d25e672c9138ad","sha512":"b4af561c193378222e089e1064dac28f9fac21f69c5abb7aeaeb06cb21bc362dc6dcea65981d1c2331b6e45d10e5a568287113c9cb21e91539962a59aaf684d9","ssdeep":"384:2F05MtGUz1xUQmbEcL6cpowU6I7ZdHCl3PEkdn69oz1R0f6Iem:2KytGUBg5uKG7LIF6e1A6Iem","tlshash":"9892838568ea0075a6cbf16c4a9f4c98773c809b4b894d0f7c8e6a74df64a71037b5bc","size":19468,"data":"","first_seen":"2026-03-03T22:20:04.235564Z","last_seen":"2026-03-04T19:47:59.118982Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/websocket/PopUp.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"07864ad2e2759d53f8f2f14dd4295bd9","sha1":"95144219e2eb702c4c4a707c3622b086876cf41c","sha256":"871bf30791bb89605b61cea815c3786246274b65ede3b8a8b8c2dd9244cfa89d","sha512":"f469d0f23c75e918d55e076d72481fca7043ac5eff9025aaac1f26860d080e4fc3c5d28f8f9ee1dae80719aca2b83f39ea82a129c221980bd7d63c212bacc119","ssdeep":"","tlshash":"9041ae54baf359a12c9b71f3aaaf30413160f2479505ed017d0cb9945f1d228b2cf7e9","size":2088,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.504581Z","times_seen":17518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c41709c2b64126b909c101a27f39153","sha1":"4ab666b36c092577acb41390ad90e96d5fea7711","sha256":"c1963697eeafb63b6c29e95da2d38d91dd907ab656e130e6e1c34d1dcd149f60","sha512":"f235dccead15199e58495c6faee849c50252b9beed29a04ae46a7a9bdbccfd569a8ab452e7fcf923b7048dfda0c3d7bd51261874642d40e994d1640ca89e330e","ssdeep":"768:u4ygd0iB6d9zYDO5qYT8fwTW3Jny+XiKZNtrt2tG:NB0iB6d9zYDO5qYTMwTW3Jny+jrP","tlshash":"e6c2b7093585102f4ecf30fbb897524f72ba95a45019a069b5fca4d1bef9f8530a6f38","size":27822,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.548057Z","times_seen":17428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab8b1bcffc72e505e0f37f693d6a87a5","sha1":"849c792d84445ff1cc946c4458255dce152a68da","sha256":"36e8c37b1055713547aa080372b86615e1f9858d3f632cb0f949e05247f8e607","sha512":"cb717ce8dccbd48d7b8ac79f8018ff327637fce9ef4441b832a9ba7af57cfae5e476170ec2490374e8026a0b6a6a265399d4ad2801ebdb37b7a0092d8f9331a3","ssdeep":"192:1BDi+KreB5FlJ7KRn8rVavN3nryOcCxiAcJGw/d2mi7yn:TTKCBRhKRn6YEDdV","tlshash":"ec42c8a821fe392301d371394f1e6a072532599bc396ad013e5e8b884fe977c46b36c7","size":12737,"data":"","first_seen":"2024-06-28T11:39:26Z","last_seen":"2026-06-07T07:30:11.579799Z","times_seen":12672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/vendor.4f844090.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1550da77b83ea7f92fa72c28654b0b07","sha1":"bdf997b0f858feb25fe28e9aedb9ac9ab199f143","sha256":"eb4f74cbc5b25824f7f0bb24042143a6495404ce6d2316886ff2c5887e52c020","sha512":"0d4ec259e0a05aa51ad1d12030c8eb7a40bfb5dfb74c2285389d0461e1dc640ddf4b77d58628f9a1cd9a92ed9d764bd90dfb1fafb85235a2c270906ce606fc2e","ssdeep":"3072:JlPm6jZ+uUcYoazxkXfDirssXrs1zFzToZpGYPfKX9dT3ZFUxxk57AT6m/FA:mzuv+pIzMvD6UFA","tlshash":"32f31bca32957c5552aa31e2887f090ef33a1d66348cd068f6a5f5d23cb540e9277f78","size":157958,"data":"","first_seen":"2025-12-19T03:52:38.075217Z","last_seen":"2026-03-19T23:48:50.690511Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/moment.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"36c8f828395a9395549bd6e7307cb7e9","sha1":"f30a4961558e2d3d4405e7d93aa28fdb63245e78","sha256":"5d5e32fa1e06a0bc9396f349d142ad248e82086543e438c890e43f41e692db33","sha512":"40c24a9011e1bbdd98bd95b341c400bdaf48fefd953fcb407368fe3c685ac09196b55e230c03ca9890c35fe9acef2c916bed52423dc1a7b532a1db9817c03a8e","ssdeep":"1536:qOL1yBkBeb9wNoHpH7tjl2Ulwjwaj2BH3fMobEKeYEoZYiMirUw0:qOCWeH70R2BkobE+cw0","tlshash":"aeb35f5a59e31023496362294fdf2011ba388123590dee487d8da3d49f9ed7c47bafec","size":117433,"data":"","first_seen":"2023-07-29T10:21:40Z","last_seen":"2026-06-07T07:30:11.501958Z","times_seen":17482,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"6681856885ee92601b7711c11d19553f","sha1":"95ab4437869df8c790cad28e0753a4c9ea362e73","sha256":"ce52fd46b2a5cfd741a2f0c39bc2d5218271b5690bdf8ec33af94f1062e98d23","sha512":"5f2a2fe1e899778e0687301ff306fd8c35b869c0675f726653be98393da31fedc388b4d3ed25d7075a0da69656458fc929bb00daf92e1381e19bb49764bea4b5","ssdeep":"192:dvbLsKRfG3Ncq2w30CowkzcDC/L04alCUM:d93d3","tlshash":"1722cb08f1bb1da540b3203c1faff082ae64564b9d89cd02bc4d59c45f09aede971f9a","size":10725,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.580464Z","times_seen":17284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/livechat.ashx?siteId=65003016","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a355ceb5fd387d8921f011041433f1e8","sha1":"dce8d6e18580c17e0ae867be77d3c9811956b349","sha256":"0dc202ddafcbb551f1b5f3e8d65c5b7bf57363cdf73317e005a30d374fd80fd5","sha512":"a3d5d8b7e96faba89a354dfeb84107aa115354e25104b3738fcafd57fc15c55eeb5efd9c06ea07c959e8605cea17a5030c621800552e05de9a31f5956f2efcea","ssdeep":"","tlshash":"535174e6676e01100b3020a95d7b738c98bc91593e488ca6ecbd522035f1f9f9655ee9","size":2620,"data":"","first_seen":"2026-03-03T22:05:42.231887Z","last_seen":"2026-03-04T12:00:40.503767Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/plugin/js/ued-index.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"3675b2750bd000949ffb8a5ff2e85ff9","sha1":"954f4018df5f82d9827f45d2135d54126e964e25","sha256":"69c2284bc7748c73a3c647e1d322e262e29ba8f572736ebb62134d62098f9edb","sha512":"c1397aeb9a931b6ff3147ae4c651c49c6cfe20e50578c56f1e045d620c5c28ea27a4e2060f49431d5d01a6d742b71e45a50de7a578d8f541246ae1f141847c2a","ssdeep":"192:5g4gicCLfixYZLZloX+rifQEw/5RNx4NPqfEyByQag2:e4gCixY+X+rnWP","tlshash":"25f10308f5f719b4a4b730398b6f49002977901fa80ace4c7d1d95c80f9952cdaadfba","size":8174,"data":"","first_seen":"2025-08-12T11:53:51.006652Z","last_seen":"2026-06-01T10:33:03.391499Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/Button.c473e3a2.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0152d00c2f305df463d02d2b26bb0d6","sha1":"ec985c18f069617a87b4c1f1c20e1a96b6972049","sha256":"ff2743d0c5f71a004611574b1ff6fef857173311483414ee569f9b6fc312a28c","sha512":"51ddb771b6b8046a3a7119f99ea7fa3f97fc7fe43c29314daabcc4f6e85e536232557d5087e3276eeee122de200d61cd3e9d266c77d4a1076e6a6d4dbd995fbc","ssdeep":"192:VUCi/WvmQ/y9OmrgX8In8A1gLGWNKi9N0FjcAVD2Mk0srw3:Vc/W1/y9OmkMK8fKWNwAAkL1w3","tlshash":"4722c8ccf0a521274393a354e13f284472766c1c4895a118b65a9ce17ffa17fa22ff7a","size":10371,"data":"","first_seen":"2025-12-19T03:52:37.948953Z","last_seen":"2026-03-19T23:48:50.679836Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/idangerous.swiper.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f15409fb02c527ce1f66a2fd3c4aa0e9","sha1":"1e1e1bcc0f49e99e14ba34991cffe0745178d302","sha256":"1a1b5d3d6fbfc28abe37a668abd59494208c63c5f0b5d040cf4bbbd137f87c27","sha512":"66a384d6ad5fba862e778e24c43326a718328b6f860469fb5eb69c2687b0bbdc3c2dfa9049b0e3d5509214db1dbec4477f5c3654dc04446a505379a4300d4908","ssdeep":"768:oTFZ8CkWyYzh9MTvl7prcAgQW5ppZ+rPPWRqKDyBuq0t:cZiY9uTJuAgQW5LZ+rPPWRLt","tlshash":"5613f8c1b32031a741f3626e91fecb4271f54966aa05d4dcb5ed84c41ab489a03beff9","size":45187,"data":"","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-06-07T07:30:11.533498Z","times_seen":17303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/websocket/CometMarathon.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"466a7ed7d00986d45375c0cbffb5233c","sha1":"68845ead668e9abd29c24b491dbf97b219226c08","sha256":"7ddafae5a0a552d2d56101cdc8306403e8fb9570759d66c48b25893b409f0123","sha512":"752801557c12ee7830f1f2e55352ab9c033aff01ff79abdffaee1601c54cdfc85a2041facfc5a7e180706812be5ad08668eada116544197fd2a784bac1903ea0","ssdeep":"192:0Pf+0Sn4NyRSTTPhvygOdWuTdC3d7QPXLHOm8cSCl1Ej3m7YAPzhsoqFncJ0j:0Pf+fnwfcXSaGLj","tlshash":"9e32314b6cf75085592b32b50f9f24447239d8572605e81c7dccaae48f98b6c0b6bfb8","size":11905,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.567524Z","times_seen":17451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d15a9b513acdcf3e9b08901384511565","sha1":"f1fe72392137895e4952f835c0330f76aacfecdf","sha256":"9fa644edfd9af9be6b244016e8f4f0eaee414732edc6ba3641e8647253359995","sha512":"9bb3e57667fd095c42db5514ac18c9b41baf50b81ded3ff810486ce394e1034751a941fefdb4e0e09bb98613b5dfc0a842d37cd9802671928e5f49380b9eda29","ssdeep":"","tlshash":"b071013cf4fa2228282b6085779b2821a5915427144dfd0cbb1ff3389fe9d25ee566c7","size":3647,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.581264Z","times_seen":17277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"57365c80ced2a0f8566b34510a73d2cf","sha1":"a4937ad0d57b5cf48339b6240110b696497dda18","sha256":"e21effa2a90c043ef413776ff4c09d1403a8088b747a60a3dcca1d6b235f3673","sha512":"537e4f3a4afdcada3ef57ec3c3949142266f2f886a0ab4ef7500137a7081f58b2d004d24d1b7d4ded4b4e9b32e75ea537b572cc7aba1fcec62e7d4c5d8603f68","ssdeep":"384:YQmbEcL6cpowU6IP+GhcqJmYcIyaFIy/BIyv3IyPlpK:9g5uKGP+GW5IXIaIqIYpK","tlshash":"86a2a41824fa406819a372785b9fa0c8f578801b8549ce05bc9e93582fd4a6c77f7bfd","size":21901,"data":"","first_seen":"2026-03-03T22:20:04.255458Z","last_seen":"2026-03-04T19:47:59.12281Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f5bce1aa50f72fd0834901c70db4f43","sha1":"41771079bee5eb45539e694a5eff580732ab26b0","sha256":"a50724b65a2657f6e67adbf98a3dd135de52b4786350f0b1bd142adff38c7ffd","sha512":"d1445eef1431e8e11779bb3aa9da243cfc04ea0abe4cb9a62b6b0f5940a9ea17ad7d0926a51925feb06ce2afc435ce9050c3955ce973407eebfa4dd1d0ca35af","ssdeep":"192:cyzyMkzf77qsBQXbhG1SUnqpT7H8DvswVAJ4jy7j3vU4P8eaoCrHoQcasI4kHwCW:mMkjq0TqEVAJ184P4DiQzR0KmgqQ2N","tlshash":"599210b876f701b24c667477875a2144e100f0ebb648ee087d4e56dc4fa8a34b3a6fd5","size":19701,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.582699Z","times_seen":17251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"edaddb8132e9e0880252c5b6c47bf1c1","sha1":"dc08b5b6ca432b46cca94f1f297491e1b08736ea","sha256":"b98809417c0240085bf70f2a1127f0b622c1514651737e7e4ffac4b39e4da17e","sha512":"00dbcc0a7b89e5e377bc26573fa3b9f1d09267044b3ee1c594e22522f8a17733bf041ebfa09ddb2e70a9f495437933f8a4e42875a16a3221067bf1df558c090b","ssdeep":"","tlshash":"da4000000000000000000000000000000000000300000000300000000f000000000000","size":6,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.58353Z","times_seen":20356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/common.032d44c1.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d90fe732a8918235001f90a280ee3fd","sha1":"7e16f5554ebea2306f378b175c18457aed09bc22","sha256":"35d46a2ae61a964d46b8d668fa0d32e3cdb9e975f848692ebc12916b32078e5b","sha512":"0600dab872d39f5e780664b3c654b854568548399779eb614e286d39cc74030f40c63703c08161e995f45aba2aa8c9413a64b7938d81cb20eebe1dd84c8a98d6","ssdeep":"1536:9QARRaYYKZIknaW+lwfZA/AHJQZ1WpbuRIRoxkpV48KbnmrbB2L:93ZIkaWAw7KbqbB+","tlshash":"b2b33afb73c5b2f44143eb64e41b6410b42e3cbe7f9587d48255cee4b9b0099898ee98","size":111648,"data":"","first_seen":"2025-12-19T03:52:38.055006Z","last_seen":"2026-03-19T23:48:50.675664Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/common.032d44c1.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d90fe732a8918235001f90a280ee3fd","sha1":"7e16f5554ebea2306f378b175c18457aed09bc22","sha256":"35d46a2ae61a964d46b8d668fa0d32e3cdb9e975f848692ebc12916b32078e5b","sha512":"0600dab872d39f5e780664b3c654b854568548399779eb614e286d39cc74030f40c63703c08161e995f45aba2aa8c9413a64b7938d81cb20eebe1dd84c8a98d6","ssdeep":"1536:9QARRaYYKZIknaW+lwfZA/AHJQZ1WpbuRIRoxkpV48KbnmrbB2L:93ZIkaWAw7KbqbB+","tlshash":"b2b33afb73c5b2f44143eb64e41b6410b42e3cbe7f9587d48255cee4b9b0099898ee98","size":111648,"data":"","first_seen":"2025-12-19T03:52:38.055006Z","last_seen":"2026-03-19T23:48:50.675664Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95956,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-06-07T07:30:11.536389Z","times_seen":18326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/bootstrap-dialog.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ce8851dc823429a42ab6147554403cc","sha1":"28f381f0e0aa4f5d56690e65723bd97fb59a38e6","sha256":"dd1edf5e54071903c4c1e81e33636444899d645df6b18bad22249da07f91c811","sha512":"f42a4d48c666d9c78fcb6c6061141452899085c504bf15e23749611dda00b6913e75ebbe47ca436a2ed016175d0918f193e474f13974a2f6a5304e18909a87ee","ssdeep":"384:3ai3F3N3VKUINthDa7Vnq86z3JCDKSz1m0hMtkJI2Cg0WEUOv5Dq:T3l3INthDu1YCDKS5flC9m1","tlshash":"6a9261ccb2d9b54c47abe072143f200df03a996951496119bc79e9ebecf060aa077f79","size":20132,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.501287Z","times_seen":17548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f1681b5a72417b33c2869aab85af152","sha1":"b40a6d9c6d058c2bd6e126a1b0191182926b9d04","sha256":"eabdfd0c5237f406e0acbef879968e72e5e3d62dd8e8b6bcee48e5ab7f4d0154","sha512":"d9190153595e85b071dbf1c92212e7c30a5de2e1d6c4533558bb5f4235d6227c327751799ce20fa50a875a4ceb25227f4eb7d133c3257d8770c1131117d8bda4","ssdeep":"","tlshash":"1631d8d2f3cd01fd42099504248620d9b11dc2394219d48efa9d3c8e73d696e232f32f","size":1761,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.584253Z","times_seen":17228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/vendor.4f844090.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1550da77b83ea7f92fa72c28654b0b07","sha1":"bdf997b0f858feb25fe28e9aedb9ac9ab199f143","sha256":"eb4f74cbc5b25824f7f0bb24042143a6495404ce6d2316886ff2c5887e52c020","sha512":"0d4ec259e0a05aa51ad1d12030c8eb7a40bfb5dfb74c2285389d0461e1dc640ddf4b77d58628f9a1cd9a92ed9d764bd90dfb1fafb85235a2c270906ce606fc2e","ssdeep":"3072:JlPm6jZ+uUcYoazxkXfDirssXrs1zFzToZpGYPfKX9dT3ZFUxxk57AT6m/FA:mzuv+pIzMvD6UFA","tlshash":"32f31bca32957c5552aa31e2887f090ef33a1d66348cd068f6a5f5d23cb540e9277f78","size":157958,"data":"","first_seen":"2025-12-19T03:52:38.075217Z","last_seen":"2026-03-19T23:48:50.690511Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fe7dadf050dad2dcfd386d21b880281","sha1":"07e7feb8dc9309fe66d86d7a9e27f8efd32ab0bd","sha256":"aa891aafe8e98e1e15d81b2b116e6c3808d0bbbec56cd24818e2e7ac911877c9","sha512":"9da40e5132ece9fe346f27aa467b2496545c84197131c633e5b1ff1f641ece723440ec0289e82d7948b85bcd901b9e3eb6e36f8e0339ae05e4a32621e895accf","ssdeep":"384:yC+tJn9Dbvbf1P3QSBxDrdiewZnnoTW39if+04xSlR4nbiamdrjNfrzInGINYlor:NWJnlN3QSBxDMewZnnoTW39L0MSR4biK","tlshash":"a762954d3a9514bb4adf31b770ab204f767e8800852c91c4bdbca0d166b5ee072e7e6d","size":14857,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.55485Z","times_seen":17494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c3f7d9e5de3b764c32a679ad06ae3db","sha1":"9ab260e36b46c6ca6f58066ee914f3826d86a37f","sha256":"fefe9a763127c0f92edfe95be1000aeed2eda7690482769c90dc9488dbe5d33a","sha512":"1517bde6929159474692270e256f6021611365d30618b57d1fd325e7170bc7540bac8500e1ccd438d2a3d5f3b6cf1456ba39560d5cbc685f4b56b4c2b4126ad3","ssdeep":"","tlshash":"0e51462618e8c076a31b639d0b9f1141b53c750bc3ac8d357d0d5b758fe451452dabdd","size":2561,"data":"","first_seen":"2023-11-23T15:36:17Z","last_seen":"2026-06-07T07:30:11.584941Z","times_seen":15235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"53f6da197921c9f2b250afec4f739e46","sha1":"e015d109098a1a0f0c538a5f7169032adda02258","sha256":"62a477320d8ac8789bc85be04df6c3db8b2a3bfde9f38506949ff89fa83096b5","sha512":"ef42804ce3cdef21a8fc407ecc86080b751120a2444763b95dfc6ca335ffb92a208d9fbcc5ee4e130d3b7bf284ae76e0aff2e5d4fd052d1c00aa644163f52e63","ssdeep":"768:cmHmhEOPRtPvJdcz4nPNCKJVR3/svMIR0KY3gYeLLvcOvBea/u+IaAVbaa1aTKO+:p2LJvjIIa4aTuUwlo8/Q0vwr90AIC8","tlshash":"e7d3c70c75f712a665b330781baf21007072951b5909ed04be5dbac4bf9c52eb3b2bad","size":134614,"data":"","first_seen":"2026-03-03T22:20:04.262006Z","last_seen":"2026-03-04T19:47:59.127721Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/gui-ued.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb7cec35bd446183907e792eaae4a5f9","sha1":"73e3145ed299615912ffba2a4a78561ede9bc219","sha256":"3cfb4eacc2e1979b0802a6d4ff00c1b0ab7a0cb48fbe7885eeae50054823ea6d","sha512":"3f8ff6ed8137c26fb06282cb4a8b7a19602749d3904d84565b2821d9030bd872ae7c9a6157c841bf528c3851fe57095c39ea6aab7df46a5a614484e7af25f866","ssdeep":"768:yonflKVlvREcS38lHMYqrRO/5IS3oFaJX+mQdudqD9jAXImsUh8H3yALdODRG4eJ:yoflKVlvREcY2Hn0PszIfoALkMEY16fY","tlshash":"0543b70a72b130a106efb1b6515f460d323a6927d44ac46c797c9ae43f74e28316bf7e","size":58738,"data":"","first_seen":"2023-07-17T06:53:27Z","last_seen":"2026-06-06T23:55:15.796571Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/plugin/js/slick.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"eaa32e5e396e8e88633fd45961f40a8f","sha1":"f4f58193c71b828dd428299c0b5133869ae3968d","sha256":"5d1146be699f8d29c94c321dbba7f310d545d6d04a8356d076d0fee69fea400f","sha512":"558aa5e86d835a03bfa13e2b5d75a01f55066e7567b26fb74494e12913f8f13bc7249aea278cba78c6c71899291b03b156306759493b80af2eec058e1d32b29b","ssdeep":"1536:/nX7Gu/1mIWhjfeeEisS7bQQk+Z47U4o029Qd:/nX71mIWhjfeeEisS7bQQBZ477d","tlshash":"0a63fe0b55e5131284a731b96bdfc028b3ba91279504ed9cbccc4385afd45288ffabe4","size":72550,"data":"","first_seen":"2025-08-12T11:53:50.978396Z","last_seen":"2026-06-01T10:33:03.406207Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/message_zh_CN.js?v=1772438913332","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f122062201cd2cedac9761f4c46b2a3","sha1":"5bced4febcad095851dd9d0dc4438d8e96aa8715","sha256":"96e43037ced41b7e8dfe16f604a02f6093aa1b65e9f349ea697e486e29bcd814","sha512":"b9cfd2e598fe9a778bea162e5180ca88bf01d2c02cceaeb27304e827fd0814662733d0df3ed07e2f3d5d0c34fea3f0e25b277d75fdc1a4de20c41eb169d225c0","ssdeep":"384:vTrBmS53qEviCysRI/2aTvfyxtvgfG+S7MjRBQP1RODaP5YnRn21IRBGN9Jaqxk7:IIy92nyfB+vODR01IRBG3JpfsIU","tlshash":"38e23ba604bedffb581615d6d44700c921d96b895afc7928bed0ee1e1b863c604f3387","size":32151,"data":"","first_seen":"2026-01-15T08:15:21.591485Z","last_seen":"2026-06-07T07:30:11.595523Z","times_seen":6831,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/gui-base.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6ce47d880d7a50ddf91b074c8572edf","sha1":"6a3657c67209136e5b544859daecf16f2d153b72","sha256":"c49e04c7ecfd07c74b58cf161ef2b58f2bc837a9091ed1ae090a33734cdaa734","sha512":"0946a1cb9d048b485dadf4056a4aa7be685a8906240a828a5ac776a4e1eae2ed5ef238bd0724da41cce33324357ba44704d34a6766430f1552630f9a17b664f4","ssdeep":"768:+lkflKVlvREcS38xHmuqrRO/5IS3oFaJX+mQdudqD9jAXImsUh8H3yALdODRG4eK:6ClKVlvREcYoHz0PszIfoALkMEY16pB","tlshash":"4353c80a72b130a106efb1b6515f460d323a6927d44ac458b97c9ae43f74f28316bf7e","size":60909,"data":"","first_seen":"2023-08-26T00:19:56Z","last_seen":"2026-06-07T07:30:11.543891Z","times_seen":16696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/jquery/jquery.nicescroll.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5bc8cd626b389bde727a91e6ce79436","sha1":"3df6c39300ac286cf596b3bda273cb39ff825429","sha256":"a1eb48eeb3b3f2ba41940d3041464f0b386b7a7c4a8acb42f3017e691f4b116e","sha512":"2c1dde58ce83d9b716919dfc42602aef3022be012b3f92e61b17b674303ecbf0b9d308064b6d6c2443cf3e3dfd36bfb332eab62e64b56bef0be801e6f4610f12","ssdeep":"768:CwJl9VwAdGuMbJVAOi9ee9RjOEe1sdMv5rjITry:Cxb7AdRjOEKhHay","tlshash":"9553a7cd7522346b05de5235d18b4b4a623a9857730b90e4762c8cf46d29bbaf223f7c","size":64651,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.513482Z","times_seen":17624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/commonPage/lan/i18n.js?t=1772624515.471","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b3d572fa82d5c485b806605d1d7457a","sha1":"b802d75b882539588ec590c3637401d1109705eb","sha256":"a71d3048b61aa7a4a35a5a9f983d3b6c679f0090c23b908d6dad58c2f639430d","sha512":"20fbdba0d190084a769fc528f247b0190d50872ed1f10a1c936ac5c5c288381c1e4779943ed2dab1622c4b12881b609fbd5c6614ba1a153a8425fbe31d348f0f","ssdeep":"","tlshash":"6a21c158f3e151e3295e4ba3ed663f6b117509bd00973507837831ce11797a79c6c408","size":1310,"data":"","first_seen":"2026-03-04T11:42:39.659194Z","last_seen":"2026-03-04T11:42:39.659194Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"479c01001c455527cf2aafec087accad","sha1":"230c5d853a00977d890c25cb56b5a07c5e0acd0e","sha256":"0ad2a7081ff475ce3a2068fe69547248166c0fd39f26fbf03f2ac5db073a16cf","sha512":"ebedabe18db451b91ae6cfe4a55712d0401a1cd5545a5b9344edcbb68c7cb678a1a8a6efc20f101d99e8cc094a060bb32deccf9e694a837ee17a8f8585bd43c6","ssdeep":"","tlshash":"1f21233e1c17a1b52ef7046a9b7bd5a63af2051b2442e400bc8cd8193f14fc11c25bde","size":1389,"data":"","first_seen":"2023-08-21T11:10:45Z","last_seen":"2026-06-07T07:30:11.586469Z","times_seen":16887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"7932637ac9b0a1125acfaeffa837b6af","sha1":"01107a42cef642f68e70ef30502ecb6c0de6a0d6","sha256":"f938651bd7efeb3c523dcca3df1c9a0cc63b12f604816c8e49636fda5b1b1c7e","sha512":"6ee9dd22796803d3a44aaf8a59219dc077e2cf7ebe2b58efe545c7f08028496e595fbea31d2990cc0f210054f6cd91055326484acd544aa29889712c2c050f57","ssdeep":"","tlshash":"bc71315e7559bc949bd3202a4a7f1008727b486f2928c850fa5dcc50af5cf0f2362b9f","size":3486,"data":"","first_seen":"2023-10-24T11:42:08Z","last_seen":"2026-06-07T07:30:11.58824Z","times_seen":15967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd4934ec50598a49950c57836d268ba9","sha1":"9830d9f40b0baf411ea1e7b7a4b65675cf35ae04","sha256":"89e8ae92a48e530a676704a7858edcc65fdd1488e39280ba8da4cb80dc5729d5","sha512":"1b7e75147ff199dc7900be58df3ab41039a70322ab2db2d697238b166447a915cefafb3e1cc17377a7ecfc08b641fd9ab51351f060abb405ceed36ee1e5b1b9c","ssdeep":"","tlshash":"c641df0d25ee1008d01729a9fbbbf50c632994272ca4ed08b50dd2154f6ed7ed2b9a9f","size":2036,"data":"","first_seen":"2023-11-22T16:18:01Z","last_seen":"2026-06-07T07:30:11.5897Z","times_seen":15182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/livechat.ashx?siteId=65003016","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a355ceb5fd387d8921f011041433f1e8","sha1":"dce8d6e18580c17e0ae867be77d3c9811956b349","sha256":"0dc202ddafcbb551f1b5f3e8d65c5b7bf57363cdf73317e005a30d374fd80fd5","sha512":"a3d5d8b7e96faba89a354dfeb84107aa115354e25104b3738fcafd57fc15c55eeb5efd9c06ea07c959e8605cea17a5030c621800552e05de9a31f5956f2efcea","ssdeep":"","tlshash":"535174e6676e01100b3020a95d7b738c98bc91593e488ca6ecbd522035f1f9f9655ee9","size":2620,"data":"","first_seen":"2026-03-03T22:05:42.231887Z","last_seen":"2026-03-04T12:00:40.503767Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/bundle.7126c698.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03585f467dd1043465e62024d84e8501","sha1":"1e5cf8a55c64abec323fd2af7e5823a22b4c18f0","sha256":"4cbd5c79ff097907e8a54d23154bef1b9b8db97a75ec78fb7f7fbc994e723353","sha512":"3c0bfd9bea584f9bc4acdac9815c499327a54479686c2b5e8189517433d9913de43dea480a34577ca551a0327e4d2cfd2271d6c598d4994b99119261805e46a4","ssdeep":"12288:nAQt366fCmXM7t36yfCNXYpnjhftWhS4V:ACfCZbfCSntwjV","tlshash":"68d41898f081b42856736161b2af360a7236a916ba4d4468f536c1f4bdf60cbd323fdd","size":623006,"data":"","first_seen":"2025-12-19T03:52:38.036277Z","last_seen":"2026-03-19T23:48:50.648715Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd3847ee53f862f940f9422407921360","sha1":"8f44ccec93445573d88fd975f4dfb229457797ee","sha256":"34ac71dd3829f2b3f11f6818b98f21f151cda4beba78b73e07ff202255cc2b84","sha512":"78adf927234bd30c5e8280654c9910a418bd7f72807a941fba56a67678892be38dc89416899a4b018ea5a09b6b746d86be6a13b251b415ff6fff4e87994f8f38","ssdeep":"","tlshash":"9ef023122942411e67c0549ddeb79800a0bd581d100420a2de4ecef43964efbb416ccc","size":650,"data":"","first_seen":"2026-03-03T22:20:04.266519Z","last_seen":"2026-06-01T10:33:03.477127Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/plugin/js/jquery.knob.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"54eb30d6c51e96d665acc4746eb6a910","sha1":"a41e96990852cc2d44474c799bab19572ceae57b","sha256":"0dd21d95d8d3f8ffdb60698e5f8f21555dfaaf4d3f28bad0a19e1e6b755a74f3","sha512":"d74254c5e52bf4066c0ea52633d98ab38d5e3aa6dea1112d3a60bcb08f5420dda15127b855375519f7bef7141872269cd29ebd4b38dac2fb0f52602def5b5715","ssdeep":"384:CXPQNneZeIb+0ocdO6DPWC4uwa5kVGqgb4BZGkA4sk:KOeZ7oBMkVGqgMBQ8","tlshash":"ed92ea0f67ee2036d613a0ae4f8f92466622c81f1547c90d3d6d96e05fe09390676fbc","size":21027,"data":"","first_seen":"2025-08-12T11:53:50.990373Z","last_seen":"2026-06-01T10:33:03.354841Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/jquery/jquery.super-marquee.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f77d83590bc0a69298f2fbcc5d9911cd","sha1":"1d6aa25d7052f53ad0181385e5efe72f224bbdb9","sha256":"1d042b9441e860ddcc01b9e9e5e8d354121ee0e31b47f6e18a321e2e633d22e7","sha512":"a39dc6c01df32c8f72842af346f4d67e1278d37a74a0541537b8274b421bcfbc547a2f4844f3c4b6c5cdda4c78f0a8f41171c87ffd149ab52526a95bc6c5bf61","ssdeep":"96:nwzrUsI9/8w/ISEgOGXFRNcrc8PQjc3Pb:+rUsk88OnJQA3D","tlshash":"2991252d7290f5d559cf3c3be02b0b050c785123a54e00927a65def279ba379a607e1f","size":4433,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.53701Z","times_seen":17506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd3847ee53f862f940f9422407921360","sha1":"8f44ccec93445573d88fd975f4dfb229457797ee","sha256":"34ac71dd3829f2b3f11f6818b98f21f151cda4beba78b73e07ff202255cc2b84","sha512":"78adf927234bd30c5e8280654c9910a418bd7f72807a941fba56a67678892be38dc89416899a4b018ea5a09b6b746d86be6a13b251b415ff6fff4e87994f8f38","ssdeep":"","tlshash":"9ef023122942411e67c0549ddeb79800a0bd581d100420a2de4ecef43964efbb416ccc","size":650,"data":"","first_seen":"2026-03-03T22:20:04.266519Z","last_seen":"2026-06-01T10:33:03.477127Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1880ce6f7e86a563b54412066416edc","sha1":"379f66a5c76c995e8255b0f825f2d2ef05d3ab74","sha256":"dadb28dfc6a383dc589a4c01a6db796fab7be6c40b7f7d413a189394ecac0bf1","sha512":"c5764f5080dc814bc985f6c4b26e18684cfe09bd3bb2dadb92e45500f82f583561e31d4b722d43628a014f5bb0c4f97019f91dbf0432d38909e7468e86e2bc49","ssdeep":"","tlshash":"70312f221117907787f2fb12a27f2406c80f878a953c99ee739f9070bb014fd71aaa4d","size":1827,"data":"","first_seen":"2024-07-12T23:08:52Z","last_seen":"2026-06-07T07:30:11.591126Z","times_seen":12357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6ea297058f6d52d83390d9ea7f914aa","sha1":"349df987c3c4c50687d993b31f83cfea7f796730","sha256":"2f21ca2376a9112f70c12ecc46d75ff792b067f5edceae5ea06011c13cf14e56","sha512":"80999dd48f3db744a7cc59dc9cec9303b35216f65d2711891705dbc5dcfb34a18c5c015a2615573aaf59315882c5724ab5dc0e218e8f9cfa2579c4ef37d81cc5","ssdeep":"96:Ge2n8LmEhLzcRXKBxap3cSubfC7WjnM9LidafQa+X9MhsvVQCi:D2n8LmEhAXKfapMSu7C7w2WX988QCi","tlshash":"e0c10e4e72e120b199a7a52c929f901024725403080fdd1dbe4d93a4df89d7fb6ba3ef","size":6025,"data":"","first_seen":"2023-08-02T04:42:13Z","last_seen":"2026-06-07T07:30:11.592514Z","times_seen":17147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e6bbb84979a27014e74be230fe8440f","sha1":"aafe0c1dba07e91354abfb25d154c0acbed24d61","sha256":"03e9af072f4db23c6c6cd74a89c796a3c764731da4734682f3ccfc07e0e54e74","sha512":"445744eb54e6f81910f41add7f3ae90b45f311a7a3b5b86bb57079210dbe60c35b0b45ce06f3e4284c55578e2e2878d656ce445fa0040dc5e6edd47017a5a116","ssdeep":"","tlshash":"36e02649d63a68e0507364ac2b7f203129ee920ba009ce68fe2d13c16f444150b71786","size":390,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.593727Z","times_seen":14838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95956,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-06-07T07:30:11.536389Z","times_seen":18326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2c998d7ca2764a732999f41912e334a","sha1":"d9a0b0c2747579bcd56fb57824458355bc92de08","sha256":"cf45d13769cbd70c78e6b136444c6c2c95c57243a42ebe92c5139b79d96b0070","sha512":"c2bf78c3517531e64a27f0700af855a8fcb8b55b060258d6ae0599effaa91492fdadf709998e89fb7434e41b22c9a284e531b636e6a9a0185a7fd5d626443e5f","ssdeep":"","tlshash":"b321bb08f3a8106878f72579987c31d442240183cc4ac8b5f97de5b14fe42987643e6a","size":1268,"data":"","first_seen":"2024-07-04T08:35:13Z","last_seen":"2026-06-06T23:55:15.813284Z","times_seen":696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c81e52c3ea24a70d3b277feea1e93852","sha1":"ac8604212ca76ed6d4fa7cce29d7dcf1805d6aad","sha256":"2633da3fc07ba54651ed4b7317345fd64901c4dee1de1ec00f6d9590c0d1e6a5","sha512":"efd2c4c81fb42cf2ee873d2c866bab44506e3db5fff92e680ee5b5204b0bbfea6eac6985e5c9fdfa65e5a93c144b34d6fbb924c9b8978d1fd0a4c08ca1fa46e5","ssdeep":"","tlshash":"8d616326b48350b750a3648a2faf19001a1c62a3c615cc5cf95d8ff09f7cf4d5603a5f","size":3264,"data":"","first_seen":"2026-03-03T22:20:04.272389Z","last_seen":"2026-06-01T10:33:03.481579Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8580f1a1d519367d9c9715b105926da3","sha1":"77c686717e23d99313d4bc5e7209fd356b404f9e","sha256":"d5db9e282aee33acb5ed879fe811702f94919078b24f4b08695075880b7572c7","sha512":"0b6fc198ed1fd62919d16fd2ae5ffac6327431d69de855c797f8823a382716682dd3e1f11200ab7a8d2e64c462ed3a28eda922ef3e858c402feb3cb9d23021ee","ssdeep":"192:ztaki2yxb7/Y3l1WjF5A/EIJgxRE/ZoX7wbep34bYyP7SColfhry:RakiBb7CrWjSlJIRE/Zy864kyPwrO","tlshash":"a1d1860cf5a60166492720750eaf51442aa66323520dd900bdcf67d0dfa9a7cb57ebfc","size":6462,"data":"","first_seen":"2025-08-12T11:53:51.026069Z","last_seen":"2026-06-01T10:33:03.482597Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/bundle.7126c698.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03585f467dd1043465e62024d84e8501","sha1":"1e5cf8a55c64abec323fd2af7e5823a22b4c18f0","sha256":"4cbd5c79ff097907e8a54d23154bef1b9b8db97a75ec78fb7f7fbc994e723353","sha512":"3c0bfd9bea584f9bc4acdac9815c499327a54479686c2b5e8189517433d9913de43dea480a34577ca551a0327e4d2cfd2271d6c598d4994b99119261805e46a4","ssdeep":"12288:nAQt366fCmXM7t36yfCNXYpnjhftWhS4V:ACfCZbfCSntwjV","tlshash":"68d41898f081b42856736161b2af360a7236a916ba4d4468f536c1f4bdf60cbd323fdd","size":623006,"data":"","first_seen":"2025-12-19T03:52:38.036277Z","last_seen":"2026-03-19T23:48:50.648715Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/websocket/Comet.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"1008fe6a5e1a182d7775963b85405bb2","sha1":"e174a7b08cc3cb5545af1cd33d2814e604119392","sha256":"7479f6f22194ac37dd6d3f5a579b4682ac8dcb6389fb961cf4140f3fcc707a20","sha512":"26e07821ee1e8e94c4bada028e049df7572cac06f2e8dae958baa7a011eb201a6a1d4ed0cfa15017a3f52a0cb949343de0b33ca6da7c245f763c86d5adfb0223","ssdeep":"192:4Pf+aTbLSru4NyRs8VDv1KygOdWuTyVC3d7QPXLHOm8cSCl1Ej7bY8l7YJIJvO5N:4Pf+aTbe4M2cXzsjDUfj","tlshash":"ab721e4a2cf76086552732b90f5f64543235a8172605e91c7dcca6e08f98b7c1babff8","size":17162,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.494719Z","times_seen":17452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"555ab82ab1b824b7b340e206fdecd28e","sha1":"091368cba8081e889ca0d529ac131161201e8c1e","sha256":"d42089eab619cf0db3df5725f4b57ab43dcd341a3b901700ca54ff43d1c89f3c","sha512":"e702cb189f85d658abe132ae6bd9df99fa4fbfc50297cac1a0cdb66c6b191e507c75837027ed745e888af34b1b859e76a2b16086928583291d64469b0aa29916","ssdeep":"","tlshash":"17e0c0870c088013099cb4f4dd75b40c9c4ae3026dcdca87449e7394f113fa68b9b2e0","size":362,"data":"","first_seen":"2026-03-03T22:05:42.48848Z","last_seen":"2026-03-05T11:01:01.15726Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d6984d3d96b020b0be0c099cb1999cee","sha1":"02de24d58a40ec3791f5f300e5101645d8635466","sha256":"fc8efc42d8db0b2f6266e3524aea080b058eda5827e736cc37db95fd0f3547e4","sha512":"b2b05d0c4c279f41e583575fb273e0046c276eaa14ee44d9efd7f591814726c200b805529c77054850a65ff652e73041192c452feb993ef2209a4e8577c6c58d","ssdeep":"","tlshash":"74d0a7a5d070081cd3212ab94dd2219c4acab55b73c64c007f8575fe9de6706c95b598","size":234,"data":"","first_seen":"2023-06-30T02:57:58Z","last_seen":"2026-06-06T14:03:14.282031Z","times_seen":4766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/next.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/next.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nEtag: \"6670e802-224\"\r\nDate: Tue, 03 Feb 2026 10:12:55 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:55 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 548\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7178169680107050165\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":548,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"caaccf19110d4fc304ee0cf3425f75d6","sha1":"5144a18a74f06c11080159222c38cb2601ca16ae","sha256":"9e9a8b7062a22ff6f55c8110685440eb162f254780c6691fbaa60972f52bdda7","sha512":"b68d6fa229d389dcb76a0836e429d2c5e9c6d56eadc0f476738b58657050dd8755ae55718ff252c62a6163b9d72fa97785f5097e7d89cb7081be4cf386854096","ssdeep":"","tlshash":"8df05cb8726d419feb8a5c8063bf2a383c471ff9e54820d439d8ad190373068ea1b965","first_seen":"2025-08-12T11:53:50.972598Z","last_seen":"2026-06-01T10:33:03.449234Z","times_seen":43,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/gui-base.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/gui-base.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 17 Aug 2023 06:15:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64ddbaed-ee5c\"\r\nDate: Sat, 28 Feb 2026 01:36:33 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding, Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Tue, 03 Mar 2026 01:36:33 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 6430\r\nContent-Length: 15779\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4373564594218962315\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61020,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11056)","md5":"e6ce47d880d7a50ddf91b074c8572edf","sha1":"6a3657c67209136e5b544859daecf16f2d153b72","sha256":"c49e04c7ecfd07c74b58cf161ef2b58f2bc837a9091ed1ae090a33734cdaa734","sha512":"0946a1cb9d048b485dadf4056a4aa7be685a8906240a828a5ac776a4e1eae2ed5ef238bd0724da41cce33324357ba44704d34a6766430f1552630f9a17b664f4","ssdeep":"768:+lkflKVlvREcS38xHmuqrRO/5IS3oFaJX+mQdudqD9jAXImsUh8H3yALdODRG4eK:6ClKVlvREcYoHz0PszIfoALkMEY16pB","tlshash":"4353c80a72b130a106efb1b6515f460d323a6927d44ac458b97c9ae43f74f28316bf7e","first_seen":"2023-08-26T00:19:56Z","last_seen":"2026-06-07T07:30:11.543891Z","times_seen":16696,"resource_available":true,"data":null}},"time_used":3397,"timings":{"blocked":3007,"dns":0,"connect":0,"send":0,"wait":389,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/bundle.7126c698.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:00.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/bundle.7126c698.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 04:53:12 GMT\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\netag: W/\"694264e2-9819e\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e140d2da7966a710ba00bef37e36e352.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: C-6TQxZK6DpzrmVLBjLKvTz6ugyuYPY5lVzhivGgZp1C5D_dmzeCRw==\r\nage: 24528\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":623006,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65422)","md5":"03585f467dd1043465e62024d84e8501","sha1":"1e5cf8a55c64abec323fd2af7e5823a22b4c18f0","sha256":"4cbd5c79ff097907e8a54d23154bef1b9b8db97a75ec78fb7f7fbc994e723353","sha512":"3c0bfd9bea584f9bc4acdac9815c499327a54479686c2b5e8189517433d9913de43dea480a34577ca551a0327e4d2cfd2271d6c598d4994b99119261805e46a4","ssdeep":"12288:nAQt366fCmXM7t36yfCNXYpnjhftWhS4V:ACfCZbfCSntwjV","tlshash":"68d41898f081b42856736161b2af360a7236a916ba4d4468f536c1f4bdf60cbd323fdd","first_seen":"2025-12-19T03:52:38.036277Z","last_seen":"2026-03-19T23:48:50.648715Z","times_seen":399,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/headerInfo.html?t=mmbyve3a","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:00.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET /headerInfo.html?t=mmbyve3a HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nCookie: sticket=RObFkySmtPVEZsTlR; route=616a9e5db4809cfe7baed9c5732eb4e2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 11:42:01 GMT\r\nout-line: gb-cdn-823\r\nsub-sys: msite\r\nuuid: 01600-01-00000000-1772624521b638\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 118\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"49ec55d4202c22deeebcc4332d5768c2","sha1":"82ab2529171db44ed50b5f17c59011735cc3b735","sha256":"1836bfa70c61667122e36cc45ec181475002700bbfeb59c5223e711cfb0cb068","sha512":"6ad7794e4994868c8e8376fe5d1335ab2877b9391c18f6b02d2c8099d014950c4c4d4679ca2eee8ea6ef1b66992a32262cfb9d5b07a36b14d1019c50f87b826c","ssdeep":"","tlshash":"feb02b201116cc7dc443811082400a1004180012f4c2790cf0bc870d328d2a60112407","first_seen":"2026-03-04T11:42:39.550148Z","last_seen":"2026-03-04T11:42:39.550148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/themes/gui-skin-ued.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-skin-ued.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-7677\"\r\nDate: Sun, 01 Mar 2026 05:56:01 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 04 Mar 2026 05:56:01 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13962\r\nContent-Length: 5914\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15175330775573911207\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30327,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7003)","md5":"c61e753f4c5f02195eddd9b9b202717f","sha1":"30e420649f2ab7a0f2f1a170de5b20ff196ade17","sha256":"355eb81e736ff348ed669fb61f548c8fc315d427de9a63fd7901762f79a642dc","sha512":"617a2dc1ffb5ba60c6f7e8cffb4eeb2084deeca146d8e88b0019624da17e35745bcc0f6a7ac9407021b9dc3b63752a69a4510df425042b0880577ea8219c6d3f","ssdeep":"384:SFboUEeh9niJRfc0uG9wBMs4N4mM+h8v8brn8JiNtSmdZ:SFbPnDGOD+jLuYtSa","tlshash":"b4d29838b20022a9b563d3a571d1dd4e362de592d2170abdf26f31d88f425ce2637b6c","first_seen":"2025-06-18T12:29:12.297893Z","last_seen":"2026-06-01T10:33:03.370425Z","times_seen":56,"resource_available":false,"data":null}},"time_used":5089,"timings":{"blocked":2408,"dns":1782,"connect":259,"send":0,"wait":260,"receive":1,"ssl":377},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/themes/hongbao.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:58.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/hongbao.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huf5as.pham.xin/ftl/commonPage/themes/gui-base.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 30 Mar 2023 06:38:07 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64252e4f-d530\"\r\nDate: Tue, 03 Feb 2026 10:12:36 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:36 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 610\r\nContent-Length: 5666\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5627827196244128639\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54576,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (336), with LF, NEL line terminators","md5":"a212ec8d2af1172e5fe97229a8cdd470","sha1":"676b870b21e2b4f18dd23dd24baa8a30955b8362","sha256":"910aca19fa0a1df0c76607fdde36968687403343a50022bed3693011abee9fc8","sha512":"6f8ef1e9c22978fe39412ca413b132e9ae54d5b84c1b95b6f40b5c7bd44e726212ca20b731de29294e77fadf0651f3cbc8bfad1d6a4ec6b808064faa4aa3811b","ssdeep":"1536:qsgR4FlccsG7TCbzG3ArEDTgkvudNssvmp13ZUcPGZ10iS9EvlBcovGF5XAso/GQ:qiu","tlshash":"78336d05e241abab21dad174230bca3bcdd81485fea4dfb7223971f4cba55e5b03625c","first_seen":"2025-04-07T03:18:03.889172Z","last_seen":"2026-06-07T07:30:11.560478Z","times_seen":10722,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/mobile-api/v5/origin/getFloat.html","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:59.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"POST /mobile-api/v5/origin/getFloat.html HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 68\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nCookie: sticket=RObFkySmtPVEZsTlR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"locale=zh_CN\u0026terminal=pc\u0026is_native=false\u0026version=v3055\u0026resolution=2x"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: https://wvv-6339.cv:8989\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 11:41:59 GMT\r\nout-line: gb-cdn-823\r\nset-cookie: route=ac3a5dd70d711e3044f5a1cf2fe56e38; Path=/\r\nsub-sys: mobile\r\nuuid: 01600-01-00000000-17726245190d0d\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1910\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5066,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"19cb9ef467a787606a1c65fda2250613","sha1":"2eecf9ee6bba7fd9711b3f33251befbd9910f68d","sha256":"4ba65ee0bab0e00ad3a4f4502978ea08465ca61c9d59f8f0666e4dc609fca197","sha512":"7f3a00d86f8050d8f465429df44eb5d71cebf5c1ad5b85ef6f806c5d42bb9227b8c2d9c1e888bed43ee1865028afdc620e0b4f97922dac300a916246cb435e07","ssdeep":"96:SD815yUl15xAqdDQLNlW5Ul15VPSkflWZSTSdp0ddd3pSlW62vNlWTzlWfRd/zRZ:SQ1J13Al91/SkNJedFc8hT+FvJ","tlshash":"e1a13422e3640856a8b59cc9b07b3b73218d0b8fa78b5eb47f5d8a346ccf4361352346","first_seen":"2026-03-03T22:20:04.217003Z","last_seen":"2026-06-01T10:33:03.357246Z","times_seen":24,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/olympic_bg.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/olympic_bg.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-4855\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13964\r\nContent-Length: 14093\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11550987892898006133\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18517,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d8fed05f669d3ba22e39854408c5daaa","sha1":"982f0f824602fd04855ff033a2c4544fff5083d1","sha256":"3695754958f2be4baba465d816248a4030ac347c5a7a4a9787a3b37290cd458a","sha512":"e2430e082c85ac0d7a0f7ba66c7555d2860c29495b35f76626235975e4ca6f9c351b3f421a9fe6738717edabda78d0e7c1f935d15cd22c133b561fc0c1b5463d","ssdeep":"384:OgyIf28e/IlI5eaiK1BGWTFTlofVpgrmryGyxX1ZXjNfX7OIJKNHHGE:OgyIeGK26dDofIKhallj17OuKNHHGE","tlshash":"b182c046d80b836f427eb285e1bacf564fd7570c6671b28a2ec0014a99d11b114e6ada","first_seen":"2025-08-12T11:53:50.944493Z","last_seen":"2026-06-01T10:33:03.331751Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2085,"timings":{"blocked":1759,"dns":0,"connect":0,"send":0,"wait":325,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/images/logo.gif.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/images/logo.gif.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 01 Dec 2025 07:35:06 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"692d452a-45b0\"\r\nDate: Wed, 25 Feb 2026 01:33:26 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 28 Feb 2026 01:33:26 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13965\r\nContent-Length: 13474\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16754212623058226113\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17840,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"886baa6a6ea1ed58882de0eebeb4f8a4","sha1":"0ebbd1038cf403473fd263b0721f5abe015138fb","sha256":"bfb2ca2b6b94d331eca0d263072a1b325ff01658e84e5b08f266bd47ea047440","sha512":"b2bba58925f2a494d64f1fd0ab46d8223a5be5907c3dc1d8a652b34ea0c25b13f64ba8e0b08848a3750a5cb0f5a62c6a854c13793c7fc77ed2ff3d2ca84d35b4","ssdeep":"384:CsiiqQqc3Nv/YDg/oVeGNRXyMoVnhK0JlMlNOOW+jlijV2l:Z8A3YD1VZKTVnhK0IlNOOW+Zoa","tlshash":"2982d069e7de3ba18d3177900b0f0a67bd1429afd21646deec58e211079c6fd683d0c9","first_seen":"2026-01-03T05:58:59.877586Z","last_seen":"2026-06-01T10:33:03.400976Z","times_seen":23,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/notice_bg.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/notice_bg.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nEtag: \"6670e802-9e\"\r\nDate: Tue, 03 Feb 2026 10:12:55 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:55 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13965\r\nContent-Length: 158\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1802280462176502205\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":158,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7e6dd3ac49639a17a8adaf070fac0387","sha1":"0a20dfd163f749d96029daaa2806e852e4b9855c","sha256":"70e7daac87469f2fab2fa81686f4311710158ca95fa3565b4ddba7814283467b","sha512":"8e79207316ddd96a94ca96a66bbc65bf3fb09d22f8363cd5cb2948c24dddeafd0b881844bcab79b67086dd4f58c1641ed91c7206f7652da58c0827e44a918777","ssdeep":"","tlshash":"e0c08cb5211b3c628aecc960f049009edf224daf120822247fe9833254eb2404c436a0","first_seen":"2025-08-12T11:53:50.924415Z","last_seen":"2026-06-01T10:33:03.383572Z","times_seen":43,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/fserver/files/gb/1600/carousel/10474/1724854766230.jpg.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:11.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1600/carousel/10474/1724854766230.jpg.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 28 Aug 2024 14:19:26 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66cf31ee-eb65d\"\r\nDate: Tue, 03 Feb 2026 10:13:01 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 10:13:01 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 598\r\nContent-Length: 721660\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2255448203884158\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":964189,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"45fe5acedd2b291877587b525690a0ac","sha1":"4428db754fd6eb0bd119d0be11ded9bafbdacdb7","sha256":"570ec167ae0df0ae21ddd4b45c7914a9b0323e2511cbd83c648128f93cf0e2b4","sha512":"75aa4d7a9da1616c34c83123aa16e46d140ee5ea21de60588b8503cd7cbdb98890e6f400f29dd3da34fc14eaf01248280f2c6d348596961798aabb9a053a28b0","ssdeep":"24576:B8knTQnrNBlSy4kCmZMZaEcaJvqFCB/F+0UdAp56a:B82q1VWvjP+Wr","tlshash":"43252334930a3ab18d19dc39f0ebaa2a61e40fd51ec9885d16c0bdc310ef59c9e5bd76","first_seen":"2025-08-12T11:53:51.00512Z","last_seen":"2026-03-04T19:47:59.092727Z","times_seen":38,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/lazyload.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/lazyload.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 07 Aug 2023 03:05:10 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64d05f66-2f79\"\r\nDate: Sun, 08 Feb 2026 11:42:27 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 11 Feb 2026 11:42:27 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 2731\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7492974900165684745\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12153,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d87854586672bff7f886a47da85da5ed","sha1":"8d0537030dc7a81ade87a41a75fd5a75e4e33da1","sha256":"17859187f895c27de8869fb6bfec579fd68c4588d0af71d08d334be92d144ada","sha512":"d8c3e724f00bcf1ebfe1f8e96dda01243cf22aef18a0fc5a25a42d84458ff58a22a316dabf1d80d1b4f4c28db79edbdf9ba19df755d72f2b0b9f64497137672f","ssdeep":"192:Cdr+EgBD7NiM7B1wV20jSCQrF/bcbe7/bgdCx4RTsmS3KDsS3CggvBSChKRJ0Suk:Cdr+JBDYpV20Ez+obgdsm3ROCJIqSJvG","tlshash":"304200483deb51aba1d3b0f89a5f11447235810b160eee253d6c9395af6093932f2ff9","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-06-07T07:30:11.549562Z","times_seen":17242,"resource_available":true,"data":null}},"time_used":3262,"timings":{"blocked":2982,"dns":0,"connect":0,"send":0,"wait":279,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/sports-promox-hg.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/sports-promox-hg.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nEtag: \"6670e802-33f\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13963\r\nContent-Length: 831\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13757515592160760883\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7e8a4f0fbe8865571ed8c4ad1e037437","sha1":"fd3ae8fa8e1c95d59e1dcf9f1b9295efd26aedef","sha256":"de445690ed1d6be3e8cc9ac63d8773f1c2ee3446d8cf62994adfb9e4946ab5ad","sha512":"dd691a70789f2af11879f743bb094c2ab636a98fa3b39eefd70436012ff44cbb4cfe5c512e14d4b3cf9dcf818312fa2b88c71f46555ccc4345bb6d0daf9e6ef8","ssdeep":"","tlshash":"a0014427df60fe15c3f28f9c2305a420cf13bade51eef558264cb5a2401448192649cd","first_seen":"2025-08-12T11:53:50.966945Z","last_seen":"2026-06-01T10:33:03.352902Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1772,"timings":{"blocked":1456,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/jquery/jquery.nicescroll.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery.nicescroll.min.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-fc8b\"\r\nDate: Mon, 16 Feb 2026 21:02:55 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 19 Feb 2026 21:02:55 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 17446\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16142757066957703640\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64651,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64577)","md5":"b5bc8cd626b389bde727a91e6ce79436","sha1":"3df6c39300ac286cf596b3bda273cb39ff825429","sha256":"a1eb48eeb3b3f2ba41940d3041464f0b386b7a7c4a8acb42f3017e691f4b116e","sha512":"2c1dde58ce83d9b716919dfc42602aef3022be012b3f92e61b17b674303ecbf0b9d308064b6d6c2443cf3e3dfd36bfb332eab62e64b56bef0be801e6f4610f12","ssdeep":"768:CwJl9VwAdGuMbJVAOi9ee9RjOEe1sdMv5rjITry:Cxb7AdRjOEKhHay","tlshash":"9553a7cd7522346b05de5235d18b4b4a623a9857730b90e4762c8cf46d29bbaf223f7c","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.513482Z","times_seen":17624,"resource_available":true,"data":null}},"time_used":3535,"timings":{"blocked":3251,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/style/keyframes.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/style/keyframes.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 09 Dec 2021 03:51:43 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"61b17d4f-1be8\"\r\nDate: Sun, 01 Mar 2026 22:42:03 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 04 Mar 2026 22:42:03 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13962\r\nContent-Length: 730\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7366351823731226141\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7144,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"42c43f3e8b5777b540037e7da84cc759","sha1":"15dea75307ea20e384a37b7a966ef7c209bc3450","sha256":"db58930a8bec6858e30880001802d948d3246ad90df3daa0f492c8e158cd17f4","sha512":"642798c81c270b369e9e33e53f9a60ff248ae1112d1fb4e54d2ce3c3f84bb6abce894c67470e795ba235288d33a6573fe146fe6080953f324c6bcaa685b710c4","ssdeep":"48:BLNyLvyLqyLJyL1O0OCO1OIOGaICwwPXEwlCtFMrCXGi85S4usjDqt:oOSusjDqt","tlshash":"ade1091489940119badb9306bed437f8173c8583aca50dbf23df3a564b531ed90bb9b2","first_seen":"2025-08-12T11:53:50.971536Z","last_seen":"2026-06-01T10:33:03.397038Z","times_seen":45,"resource_available":false,"data":null}},"time_used":5119,"timings":{"blocked":2394,"dns":1778,"connect":288,"send":0,"wait":318,"receive":0,"ssl":338},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery-1.11.3.min.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-176d4\"\r\nDate: Tue, 03 Feb 2026 09:42:45 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:45 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4139\r\nContent-Length: 33545\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11953182294993134157\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-06-07T07:30:11.536389Z","times_seen":18326,"resource_available":true,"data":null}},"time_used":3028,"timings":{"blocked":2661,"dns":0,"connect":0,"send":0,"wait":280,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/themes/hb/css/pc.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/hb/css/pc.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-b5d\"\r\nDate: Sun, 01 Mar 2026 22:46:08 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 04 Mar 2026 22:46:08 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4141\r\nContent-Length: 911\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13945490206651924878\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2909,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1da71520b7a0a61526a8fa8d0feb40d1","sha1":"ba1bf69dad8783563328054cae58ccabf1b00829","sha256":"5eb4d895bcb33061cda238c8ff4985ede69a866819b980c732cf3802ec101e8d","sha512":"d1cb92160523c231c4942f27c018bd3b30f89fc60153e23eb0a49d0696c896b0904ebe5db7cb97a0686f656d04a58f3ccf8fc0f09f2be703fa8400bd3270dfa8","ssdeep":"","tlshash":"d451dd305a02b1aaf42ffa677420874c2537004373169b3e72fd7ad1cfca9696136ad4","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.485758Z","times_seen":17228,"resource_available":false,"data":null}},"time_used":3733,"timings":{"blocked":3466,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/Button.c473e3a2.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:08.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/Button.c473e3a2.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2o9o7qal.3j1ai0ll.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 04:07:39 GMT\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\netag: W/\"694264e2-2883\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e140d2da7966a710ba00bef37e36e352.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: 6-louT6wdJVeePV9pqHCKwrytmCeC3avaRJV27CkIEeoHuQlu6K_EA==\r\nage: 27269\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10371,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10256)","md5":"b0152d00c2f305df463d02d2b26bb0d6","sha1":"ec985c18f069617a87b4c1f1c20e1a96b6972049","sha256":"ff2743d0c5f71a004611574b1ff6fef857173311483414ee569f9b6fc312a28c","sha512":"51ddb771b6b8046a3a7119f99ea7fa3f97fc7fe43c29314daabcc4f6e85e536232557d5087e3276eeee122de200d61cd3e9d266c77d4a1076e6a6d4dbd995fbc","ssdeep":"192:VUCi/WvmQ/y9OmrgX8In8A1gLGWNKi9N0FjcAVD2Mk0srw3:Vc/W1/y9OmkMK8fKWNwAAkL1w3","tlshash":"4722c8ccf0a521274393a354e13f284472766c1c4895a118b65a9ce17ffa17fa22ff7a","first_seen":"2025-12-19T03:52:37.948953Z","last_seen":"2026-03-19T23:48:50.679836Z","times_seen":389,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/partner/partner-hongtu-gray01.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-gray01.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1a1f6\"\r\nDate: Tue, 03 Feb 2026 09:42:54 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:54 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 5087\r\nContent-Length: 81241\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16743684203631679703\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106998,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0d835d7c8082eee7f89f0b1b2e62f4e4","sha1":"0faf9149c454be0261eea8b14afaabb70a6bddca","sha256":"a5f8a8d222b97704ebb832a6c68228b835c7d40fabd508de50d662e8f1add6ce","sha512":"c3a9d53a1cd3b51fa7b5af588085dc2ce8de1d0ebd7a86b151f90564dfc120b31be5a5519950265b4b511b7e1b80e5d5e3938104a8cdccfcfce626e5de27f372","ssdeep":"1536:AxJxL2StOAnubXwaS8BIunTHYHwpjLao55e39o8/mamUX1eYPo6uXyQenBV7/XAd:kKuqnbnbKwBw68+amI1eYg6fBVjg","tlshash":"daa30234d3a4f6d50ead035ee525f92c9e4182a74024edc9742b2cd382fd1786e10bde","first_seen":"2025-09-07T00:50:47.554845Z","last_seen":"2026-04-17T08:59:04.344356Z","times_seen":1764,"resource_available":false,"data":null}},"time_used":1436,"timings":{"blocked":531,"dns":0,"connect":0,"send":0,"wait":277,"receive":351,"ssl":277},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/favicon/favicon_1600.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:05.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1600.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 04 Mar 2026 11:42:04 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nServer: SLT-MID\r\nContent-Length: 150\r\nX-NWS-LOG-UUID: 12970767240711392624\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":150,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-06-07T07:32:20.043451Z","times_seen":36060,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/mobile-bg.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/mobile-bg.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-220e\"\r\nDate: Tue, 03 Feb 2026 10:19:21 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:19:21 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13964\r\nContent-Length: 6687\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5904405484428887510\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8718,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c2e51de7d10065f15cff938e36cf2b64","sha1":"edff354cc23acb15a26b2fc468d85e838ab1342e","sha256":"f793cafa62b935e8f258495c49bb3f6bf7e3712693239c5ddd08ae573b5c3213","sha512":"7607ce172bea6e029a106b303183c3b28d4387416ea990e5504b5ba539e8ac05c7c4b2c02474ed2755085188e23c0595fe8997f08f54ac292918c1b91a479bf7","ssdeep":"192:cuUu+AAWHpQ8kMu/6c6TAQs/62baF2RVSJRXFnsIgTqMXPSoi1IfXdC7x4O:JUur3HAMrdKdRcPOIgTbfXVCNR","tlshash":"a2029f9b8a8e34c4d04635792994a2343e81757b5b4e1f70a3dd8667daa8cb0ffd6043","first_seen":"2025-08-12T11:53:50.962243Z","last_seen":"2026-06-01T10:33:03.42175Z","times_seen":43,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":282,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/style/slick-theme.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/style/slick-theme.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 07 Jun 2022 09:15:43 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"629f173f-c49\"\r\nDate: Mon, 16 Feb 2026 07:24:33 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 19 Feb 2026 07:24:33 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13962\r\nContent-Length: 882\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9508402108113080527\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3145,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f9faba678c4d6dcfdde69e5b11b37a2e","sha1":"81a434f94f2b1124f3232bb86f2944f82fb23ac0","sha256":"7adaf08052c6a6a0f8a0d0055b4f191fd07389fe41c972b69573472b2ecb406a","sha512":"ea52d475e439ba178c15b5a6dc23f6ef5975e11b17d71b71f89e71db27880e49220697954cd853aa28cc13b1a044a2a2ea10aaa2fc02a014e5441102db433c32","ssdeep":"","tlshash":"cb51e19856b3a746101694903be7472477cb70131629d8acff95638dcfcd0d8ead934e","first_seen":"2023-04-05T09:38:24Z","last_seen":"2026-06-07T08:15:36.935982Z","times_seen":25680,"resource_available":false,"data":null}},"time_used":2917,"timings":{"blocked":2659,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/jquery/jquery.super-marquee.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery.super-marquee.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-1151\"\r\nDate: Sun, 08 Feb 2026 14:57:36 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 11 Feb 2026 14:57:36 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4139\r\nContent-Length: 1421\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17716514285705104964\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4433,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4433), with no line terminators","md5":"f77d83590bc0a69298f2fbcc5d9911cd","sha1":"1d6aa25d7052f53ad0181385e5efe72f224bbdb9","sha256":"1d042b9441e860ddcc01b9e9e5e8d354121ee0e31b47f6e18a321e2e633d22e7","sha512":"a39dc6c01df32c8f72842af346f4d67e1278d37a74a0541537b8274b421bcfbc547a2f4844f3c4b6c5cdda4c78f0a8f41171c87ffd149ab52526a95bc6c5bf61","ssdeep":"96:nwzrUsI9/8w/ISEgOGXFRNcrc8PQjc3Pb:+rUsk88OnJQA3D","tlshash":"2991252d7290f5d559cf3c3be02b0b050c785123a54e00927a65def279ba379a607e1f","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.53701Z","times_seen":17506,"resource_available":true,"data":null}},"time_used":3501,"timings":{"blocked":3228,"dns":0,"connect":0,"send":0,"wait":272,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:56.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nEtag: \"5d848f4f-1ad7\"\r\nDate: Tue, 03 Feb 2026 09:42:46 GMT\r\nContent-Type: image/jpeg\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:46 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 6871\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 406731050416656183\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6871,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 168x168, components 3","md5":"99be4bfe275809d4e436b77c991b1381","sha1":"54eadee77394eb62ccf377ae68d9f49acb5b6785","sha256":"4ca35131972acdf420b94f0d64a5a0f504eb5a7b0e6fb7b8b467916a12aae37d","sha512":"452a79b02619ed5c1e4f81fc5a4a209cb8a11d03aadb1841ae9be18fbca088652cdb54340329c1bf57771abfb02ffed4bf75b61f4df96866b7f2358c36ae75a3","ssdeep":"192:p7FikLUR+6X7MCy5nSb1jSG99DX8yclWGo2yscY8:pfA3+gSGjX25+Y8","tlshash":"4ae18e26da8bdb85c4a4f2713f7d881a5551da1a5bd3f02160f8c41b3c9327c15e7a8f","first_seen":"2023-04-30T20:28:22Z","last_seen":"2026-06-07T07:30:11.517692Z","times_seen":17417,"resource_available":false,"data":null}},"time_used":4059,"timings":{"blocked":3778,"dns":0,"connect":0,"send":0,"wait":279,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl//commonPage/commonContent/nav/images/navbar-sub-nav9/bg.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:00.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/commonContent/nav/images/navbar-sub-nav9/bg.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 06 Dec 2022 03:10:08 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"638eb290-46acc\"\r\nDate: Tue, 03 Feb 2026 09:42:47 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:47 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 3031\r\nContent-Length: 220016\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2715851198404753177\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":289484,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0c8de76f85a5b71a96399149ea5b8f1f","sha1":"2c264b3c769e362fff3d5226f362f93a31e7d9cc","sha256":"89ffd63e91cb3ad46e60b01f75a9d10e7e0b25c22680aa882e667fc3f6b5f99e","sha512":"ef09b08561ad8c4f8d9a7684827967af9da3128b0c48c0238e50209d77a8c0d8a884112761571b5c6863fe9b43c9ab8db3f34c0c30fc1245de0d5c4043cbda2d","ssdeep":"6144:pnR/nfYzYntcQ0Gf5OtR+lacynj0xygGY/4UcXZ39jUr9NchR2CXitRi36soULJ:VKYntcQP5OtolNynAMdFFJ3mUhR2C0Py","tlshash":"06542379af00bc556388e10f74cf7f6cc3ea18d7ca6aa59158906581a7ef3903b18c32","first_seen":"2024-07-04T08:35:14Z","last_seen":"2026-06-06T23:55:15.726256Z","times_seen":788,"resource_available":false,"data":null}},"time_used":2419,"timings":{"blocked":631,"dns":1,"connect":312,"send":0,"wait":317,"receive":838,"ssl":317},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/partner/partner-hongtu-gray.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-gray.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-199fb\"\r\nDate: Tue, 03 Feb 2026 09:42:51 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:51 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 6432\r\nContent-Length: 79652\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9888922152409754934\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104955,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Apple HFS Plus version 12135 data (spared blocks) last mounted by: 'GYCw', created: Thu Nov 30 10:34:46 2084, last modified: Thu Sep  4 23:18:47 2098, block size: 1467044454, number of blocks: 729362515, free blocks: 1497459512","md5":"c74ef17cb37fbfb0a1c949597470e977","sha1":"34c6ba958b6527c7a9eb35a4d64233da66e772c7","sha256":"f3fafe4c402edc11f26d8170dd5ef6da07e1d538ce471b39fd0769803439d2db","sha512":"493dc789121a373e46f86420affcd800691d47a146c19852599e9896ca521c3fd42a89a02932fbf69d4d3040734cc0ec4f0c3afc86064ec54668397955a48bbf","ssdeep":"1536:2qC8ZeKIScoUhq8lzPJt7W54AH4XmYho/1bxXoYW5qyx+zn8tnngf:2xi0hJzRthZWT9BoKysin8","tlshash":"c9a3023ccb433a116ad267a51fb22deda740e6cb555e03e785d222c615963ceef318e0","first_seen":"2025-09-07T00:50:47.660386Z","last_seen":"2026-04-17T08:59:04.26396Z","times_seen":1764,"resource_available":false,"data":null}},"time_used":1824,"timings":{"blocked":486,"dns":1,"connect":245,"send":0,"wait":565,"receive":271,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/fserver/files/gb/1600/carousel/10284/1765858609355.jpg.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:03.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1600/carousel/10284/1765858609355.jpg.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 16 Dec 2025 04:16:49 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6940dd31-72e8d\"\r\nDate: Wed, 04 Mar 2026 03:18:22 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Sat, 07 Mar 2026 03:18:22 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 608\r\nContent-Length: 355646\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3573617710847818881\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":470669,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0dd186af09f217257e4a1ffee0a9cfc2","sha1":"b8f1735fd384bb510cdaa3a96746c65f2c1791ed","sha256":"72f823a7a9d18bd401fef64af9fb3af8e2abe0972de2082c9dbde6603985df41","sha512":"a4c300fb6ef3e32c02b93278f5c8eef21b79473bfb7d87b72874087b94a6c44d90e78ed61de542e96aa982f0eff178938c620931b60e0a731b64a9adb83c265a","ssdeep":"12288:+ABofUSkEh132ASoC4VQbjMnmCxFrxH4ltY0BRzTF+:+A651mA9QfJijYb9fs","tlshash":"c1a4239a6f942d480d6883ade4352fd27dfccaf1608be0f396c68ee7715f1668c29150","first_seen":"2026-03-03T22:20:04.06997Z","last_seen":"2026-06-01T10:33:03.444374Z","times_seen":22,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/mobile-bg.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/mobile-bg.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-220e\"\r\nDate: Tue, 03 Feb 2026 10:19:21 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:19:21 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 600\r\nContent-Length: 6687\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2968497621114833096\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8718,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c2e51de7d10065f15cff938e36cf2b64","sha1":"edff354cc23acb15a26b2fc468d85e838ab1342e","sha256":"f793cafa62b935e8f258495c49bb3f6bf7e3712693239c5ddd08ae573b5c3213","sha512":"7607ce172bea6e029a106b303183c3b28d4387416ea990e5504b5ba539e8ac05c7c4b2c02474ed2755085188e23c0595fe8997f08f54ac292918c1b91a479bf7","ssdeep":"192:cuUu+AAWHpQ8kMu/6c6TAQs/62baF2RVSJRXFnsIgTqMXPSoi1IfXdC7x4O:JUur3HAMrdKdRcPOIgTbfXVCNR","tlshash":"a2029f9b8a8e34c4d04635792994a2343e81757b5b4e1f70a3dd8667daa8cb0ffd6043","first_seen":"2025-08-12T11:53:50.962243Z","last_seen":"2026-06-01T10:33:03.42175Z","times_seen":43,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":534,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/fserver/files/gb/1600/carousel/10421/1714577513208.jpg.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:08.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1600/carousel/10421/1714577513208.jpg.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 01 May 2024 15:31:53 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66326069-10a175\"\r\nDate: Tue, 03 Feb 2026 10:12:58 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 10:12:58 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 601\r\nContent-Length: 819826\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13793782300035009605\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1089909,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d6f49cd0e60da09a6ae6b9c8e3e5f579","sha1":"9242f5ec366097c666590853218786c94e394be3","sha256":"199d7ea151e7a647ee21435a490b742cfb8c49c3fd85280ffef07f8228be393b","sha512":"f56198fd2ef15e2115a8130c381405e49d3822a212ecba2ca8e9fa1fe67571e452e79b8da503c330c3542d720c366e39c74c0ffa6e1dd8d233c5c2edf2ed0621","ssdeep":"24576:6wHzS/CPdLtWXfaPlqQONDjNvbUSfK4w06KVl5p:/H3xK+kvv1d","tlshash":"b82523345d9d6d268249d135a27bbe2b9cd30cd738489e7378e689c610a7a60cf5fc70","first_seen":"2025-08-12T11:53:50.99533Z","last_seen":"2026-06-01T10:33:03.422543Z","times_seen":41,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/mobile-api/v5/origin/getThirdParam.html","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET /mobile-api/v5/origin/getThirdParam.html HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nCookie: sticket=RObFkySmtPVEZsTlR; route=169b5c290b6963ddbef067cfad367b83; SID=LnCuhBHxoP8XsEd9ht3Om385lCrLMPb3MRB/Ghbx+vctXZVJBDAcVY+DubvOiujflezKnMWbYk3Guxsd8BTNgKRlnudbDtrHQ+QBdE8w3zQ5Wp8VMgM=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 11:42:01 GMT\r\nout-line: gb-cdn-823\r\nsub-sys: mobile\r\nuuid: 01600-01-00000000-1772624521e060\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 86\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"9ac55fe189e4f53f37156e563e0f542e","sha1":"18b13b1360ce9fbd973e046d2652be38d58a15e0","sha256":"d7e02321006e1520d4c3e8d26428462419388e022cc89f3c974d0b87ad83af7b","sha512":"45b140d1bb3f3f06ff883448128956edda4d8ae0820dbb6b10f13860896cd611921dadb5b11b8d1577f22a80aefdfdbf8a2d54f6076b1e05f69d262df93b94f0","ssdeep":"","tlshash":"12b012816118adb39f0317e120ec380142fc11d180d48408dc5c8e5847948d7a202933","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.50515Z","times_seen":15881,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/ftl/commonPage/images/favicon/favicon_1600.png","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:03.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1600.png HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nCookie: sticket=RObFkySmtPVEZsTlR; route=169b5c290b6963ddbef067cfad367b83; SID=LnCuhBHxoP8XsEd9ht3Om385lCrLMPb3MRB/Ghbx+vctXZVJBDAcVY+DubvOiujflezKnMWbYk3Guxsd8BTNgKRlnudbDtrHQ+QBdE8w3zQ5Wp8VMgM=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 11:42:03 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":150,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-06-07T07:32:20.043451Z","times_seen":36060,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/images/nav/logo_hg.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:05.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/images/nav/logo_hg.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-a3a\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13966\r\nContent-Length: 2058\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6934802277907554403\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2618,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"135cfa25e9c949e9c61ee95fc46fa98a","sha1":"1bb31878ef45ec0651dc7bb2597193a211f95d0c","sha256":"07d3dd0dbb05e4f6122ba49a50595574acd957eea88071be4b51739d83d4f389","sha512":"57f8456fd7a7e122b46cd20e6d64bf319cf19e8568b7140f33e826f544d0e18c7f3f81c4deaed3d8c0b3bd2a507d95c1f538545f066f339af412d22985ded290","ssdeep":"","tlshash":"b3515b2eaa0ff988076f129afe60472e2e8934315563166c8cd0d4417ced7e2e128655","first_seen":"2025-08-12T11:53:50.936542Z","last_seen":"2026-06-01T10:33:03.353798Z","times_seen":43,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x746p7mo.hygutsf8.com/visitor.ashx?siteId=65003016","fqdn":"x746p7mo.hygutsf8.com","domain":"hygutsf8.com","tld":"com"},"ip":{"addr":"13.248.188.234","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.m1nkk57l.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F9:FD:D6:B8:4E:0B:44:8E:28:48:75:D1:8B:6E:74:A7:DC:BD:45:E3","sha256":"C9:1A:1F:97:F8:66:C4:1B:A7:BE:A9:A0:C0:09:8A:63:66:A3:DC:F1:FF:69:58:2A:3F:DB:01:53:B9:B0:71:B7"}}},"request":{"raw":"POST /visitor.ashx?siteId=65003016 HTTP/1.1\r\nHost: x746p7mo.hygutsf8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 69\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"[{\"type\":\"getConfig\",\"chatVersion\":\"\",\"ssoSessionToken\":null,\"id\":1}]"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 11:42:07 GMT\r\ncontent-type: text/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://wvv-6339.cv:8989\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\narrserver: chatserver2\r\np3p: CP=\"CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1318,"size_decoded":0,"mime_type":"text/json","magic":"JSON text data","md5":"fb9f89454235d4de41154a366d4fc9fe","sha1":"40e20833379653ce57d9ec1b499a78d298b23a86","sha256":"20c6a03a6d43d8eb7049efdbe495ec40fc2f80d665114ca816869738dd32328d","sha512":"f189a2564c4518ba9586e71322eb329f183f99f280b047f38faa66d22d994e0cf2274ceee5b1ce337f7302d687dff52c174d3d8604f583b9f6ae97fa5acd5cf3","ssdeep":"","tlshash":"9d21fdef6085907d8b264662e32e771c8a3eab1f27007884f66c8e1e35d35ae0565257","first_seen":"2026-01-30T17:56:34.465201Z","last_seen":"2026-04-09T10:59:41.828169Z","times_seen":71,"resource_available":false,"data":null}},"time_used":2134,"timings":{"blocked":956,"dns":42,"connect":1,"send":0,"wait":221,"receive":0,"ssl":911},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x746p7mo.hygutsf8.com/campaign.ashx?siteId=65003016\u0026campaignId=58b2c115-a20b-4d90-bec8-bed0fe507907\u0026lastUpdateTime=000000002ABD0811simplifiedChinese","fqdn":"x746p7mo.hygutsf8.com","domain":"hygutsf8.com","tld":"com"},"ip":{"addr":"13.248.188.234","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:08.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.m1nkk57l.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F9:FD:D6:B8:4E:0B:44:8E:28:48:75:D1:8B:6E:74:A7:DC:BD:45:E3","sha256":"C9:1A:1F:97:F8:66:C4:1B:A7:BE:A9:A0:C0:09:8A:63:66:A3:DC:F1:FF:69:58:2A:3F:DB:01:53:B9:B0:71:B7"}}},"request":{"raw":"GET /campaign.ashx?siteId=65003016\u0026campaignId=58b2c115-a20b-4d90-bec8-bed0fe507907\u0026lastUpdateTime=000000002ABD0811simplifiedChinese HTTP/1.1\r\nHost: x746p7mo.hygutsf8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 11:42:08 GMT\r\ncontent-type: text/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\narrserver: chatserver2\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17390,"size_decoded":0,"mime_type":"text/json","magic":"JSON text data","md5":"d3d0a8fc9380126321d3186effde393f","sha1":"0097d175bd18b62e155edfc508456c00ff8def47","sha256":"d9a09c60465f20b737ab95c0f72bf108b1efcca9513c962d4050c1d2f01f05ff","sha512":"cd9805e9c9a1dd0443b92f6fcc3384c970b78bde86c156481736cc9e57d59a2e24fe34218b3904df7d425b07a1a7cea61cff32962a5526acc39bed2c8abc65cb","ssdeep":"384:equf1cDrNQicn2F0cO2f1kM2r1h3kO3F3L:uf1cDrNQiK23f1kMiP","tlshash":"aa72c6736209599c42164fd1a7c37b3a3088511baa7464fdf3e84a3b5aca9c7d2316cb","first_seen":"2026-03-03T22:20:04.066895Z","last_seen":"2026-03-04T19:47:59.076069Z","times_seen":20,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/message_zh_CN.js?v=1772438913332","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET /message_zh_CN.js?v=1772438913332 HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript;charset=UTF-8\r\ndate: Wed, 04 Mar 2026 11:41:56 GMT\r\nexpires: Sat, 07 Mar 2026 11:41:56 GMT\r\nout-line: gb-cdn-823\r\nuuid: 01600-01-00000000-1772624516a28e\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33499,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (15759), with LF, NEL line terminators","md5":"5e29a736bb07482814f4fb40f94618e3","sha1":"95031dd994aa15757b741e35e8165e6e54b396e6","sha256":"9cc0606e9e078be2bd4a7f0128364ad8a989ba363258d3d6058d8cf79b1fd3a8","sha512":"6df469c4d40670119fc0071f8339fc104ef3f9b8e96608462fb533295ae361da6c177d7d67a3ea50bb2da87e8c27cab6f4a54019f8feb61c5a846350d315c8c8","ssdeep":"768:IIy92nyfB+vODR01IRBG3Jpf3OEg7/wiwL38:Ib9BB+vF1IRBG/Op","tlshash":"05f24c8746fecbf68a4a0af99c5301ae22b557c8c9ec79147f90ddd92b457c900a7383","first_seen":"2026-01-15T08:15:21.544222Z","last_seen":"2026-06-07T07:30:11.553837Z","times_seen":6773,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/images/nav/logo_hg.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/images/nav/logo_hg.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-a3a\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13964\r\nContent-Length: 2058\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18073992164928520650\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2618,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"135cfa25e9c949e9c61ee95fc46fa98a","sha1":"1bb31878ef45ec0651dc7bb2597193a211f95d0c","sha256":"07d3dd0dbb05e4f6122ba49a50595574acd957eea88071be4b51739d83d4f389","sha512":"57f8456fd7a7e122b46cd20e6d64bf319cf19e8568b7140f33e826f544d0e18c7f3f81c4deaed3d8c0b3bd2a507d95c1f538545f066f339af412d22985ded290","ssdeep":"","tlshash":"b3515b2eaa0ff988076f129afe60472e2e8934315563166c8cd0d4417ced7e2e128655","first_seen":"2025-08-12T11:53:50.936542Z","last_seen":"2026-06-01T10:33:03.353798Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2069,"timings":{"blocked":1606,"dns":0,"connect":0,"send":0,"wait":462,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/layer.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/layer.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nEtag: \"5d848f4f-55f6\"\r\nDate: Sun, 08 Feb 2026 00:55:08 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding, Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 11 Feb 2026 00:55:08 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4139\r\nContent-Length: 22006\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9585532121060409499\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22006,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21910)","md5":"cb96339625e9d456e32f86cdb3c7a7a1","sha1":"1301165c58bbb13c542cba493b7ab5774e87e31f","sha256":"17fb047ba6828fcbdf2ca226fa4594cfded2b2fdfeaff89a5bd81c7cf0359919","sha512":"53083bf4d6d450b1e9402c3f3dc40fb3434a27d47fbabee51f4ce1d3577f2a0aabe90cf5f6dfc22830a3878ec7552a6bf6bff605c82a4f832c79f34f7657ccef","ssdeep":"384:r1dCih92A3DgrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:r1YiV3D+WtXItqF13k8","tlshash":"6aa2b76a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.489421Z","times_seen":17440,"resource_available":true,"data":null}},"time_used":3477,"timings":{"blocked":3218,"dns":0,"connect":0,"send":0,"wait":258,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/mobile01.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/mobile01.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-2a04\"\r\nDate: Tue, 03 Feb 2026 11:36:14 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 11:36:14 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13356\r\nContent-Length: 8156\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4159353419842139985\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10756,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7836d134598cc35963169e32211c395e","sha1":"8447cedc69d6444bdc3b261fd0b6633c13ffd80b","sha256":"88231edaafaba127cd7e0fe280746c180fbd79d631898dd983ac6c53fbe9d341","sha512":"f3ed4ba3fe0d61a7f3e9abaf9041683cd5b8b2f65ff2903cd637ca1d016d10a61712a03ed650589a95994d094dbbd96d51bb0a12f381a5ea0e7bf9de548bc332","ssdeep":"192:CcKJUdpxIuw4i4psoFYOwnY9yelfvRcIcWWN4XUOtoQTe5SaZRS:fKQxI14Zp7FonwlRv25Kt67ZI","tlshash":"b622bf841ae20dd9326d4a9048390279472dfa7358dc9511fa843edd8d44fedce53706","first_seen":"2025-08-12T11:53:50.99974Z","last_seen":"2026-06-01T10:33:03.387233Z","times_seen":43,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":599,"dns":0,"connect":0,"send":0,"wait":322,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/sports_promo_02.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/sports_promo_02.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-a4b\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13963\r\nContent-Length: 1986\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12724189820089603528\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2635,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"08bf7cf71c8d70972070f8358fa6bb09","sha1":"1ba7199e97c3081736bd36e5bdf3fc17f35bbd14","sha256":"659e8338cfcbcede8fdef81ea3984b81a3ac20b4f80500ee4ac06376a6c007d4","sha512":"641960bd25f08a2574656feabbf7879eaa36985dc57b5e8315d4264a2b9ad037eaec96667011abeee2cedf4636c036d3fd69c8772fa8333bcdec42988ef07e20","ssdeep":"","tlshash":"6651097e81dd79493e2d0301f4225af21f6c54eae856adf01489fee11030846cfbc94c","first_seen":"2025-08-12T11:53:50.985376Z","last_seen":"2026-06-01T10:33:03.448169Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1617,"timings":{"blocked":1296,"dns":0,"connect":0,"send":0,"wait":318,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/index/getAppsUrl.html?device=sportsApp\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:05.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=sportsApp\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nCookie: sticket=RObFkySmtPVEZsTlR; route=44d17259ab44b1b54887077d522d7137; SID=LnCuhBHxoP8XsEd9ht3Om385lCrLMPb3MRB/Ghbx+vctXZVJBDAcVY+DubvOiujflezKnMWbYk3Guxsd8BTNgKRlnudbDtrHQ+QBdE8w3zQ5Wp8VMgM=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 11:42:06 GMT\r\nout-line: gb-cdn-823\r\nsub-sys: msite\r\nuuid: 01600-01-00000000-17726245262632\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1140,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"6d5fc0ec001f4f6eb22ebf8dcfe7d2ed","sha1":"0b1c514482e2ef72830e4343d53c1b76d37a7a18","sha256":"62fae126afc93367606d3481f9d913695404907a6c37adc71ebfff3556ca453f","sha512":"3880100aca862ba2cc3e0a726845ab84296534fe9d0cdafd30832bc0913ed9ee2bc0cbadd2778e7b2ac7f967b85dcb4fd3106a0af280f75966f12d10179d9657","ssdeep":"","tlshash":"5121a7ba399c6fe446c25f8cacaf0a052c391881ca12a422bed1247007cc129459395a","first_seen":"2026-03-04T11:42:39.591008Z","last_seen":"2026-03-04T11:45:46.415538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 27 Aug 2024 03:30:00 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66cd4838-3a09\"\r\nDate: Fri, 27 Feb 2026 01:15:44 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 02 Mar 2026 01:15:44 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 6430\r\nContent-Length: 4126\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18289368142321145634\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14857,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14855), with no line terminators","md5":"4fe7dadf050dad2dcfd386d21b880281","sha1":"07e7feb8dc9309fe66d86d7a9e27f8efd32ab0bd","sha256":"aa891aafe8e98e1e15d81b2b116e6c3808d0bbbec56cd24818e2e7ac911877c9","sha512":"9da40e5132ece9fe346f27aa467b2496545c84197131c633e5b1ff1f641ece723440ec0289e82d7948b85bcd901b9e3eb6e36f8e0339ae05e4a32621e895accf","ssdeep":"384:yC+tJn9Dbvbf1P3QSBxDrdiewZnnoTW39if+04xSlR4nbiamdrjNfrzInGINYlor:NWJnlN3QSBxDMewZnnoTW39L0MSR4biK","tlshash":"a762954d3a9514bb4adf31b770ab204f767e8800852c91c4bdbca0d166b5ee072e7e6d","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.55485Z","times_seen":17494,"resource_available":true,"data":null}},"time_used":3643,"timings":{"blocked":3385,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/livechat.ashx?siteId=65003016","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:00.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /livechat.ashx?siteId=65003016 HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/x-javascript; charset=utf-8\r\ndate: Tue, 03 Mar 2026 12:40:52 GMT\r\nserver: Kestrel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e140d2da7966a710ba00bef37e36e352.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: oQLzHif5CVgG7D8chwCqJED-Ew3pHAIrEAoNOG6tDDcPS6lxkOfwwg==\r\nage: 82868\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2620,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1084)","md5":"a355ceb5fd387d8921f011041433f1e8","sha1":"dce8d6e18580c17e0ae867be77d3c9811956b349","sha256":"0dc202ddafcbb551f1b5f3e8d65c5b7bf57363cdf73317e005a30d374fd80fd5","sha512":"a3d5d8b7e96faba89a354dfeb84107aa115354e25104b3738fcafd57fc15c55eeb5efd9c06ea07c959e8605cea17a5030c621800552e05de9a31f5956f2efcea","ssdeep":"","tlshash":"535174e6676e01100b3020a95d7b738c98bc91593e488ca6ecbd522035f1f9f9655ee9","first_seen":"2026-03-03T22:05:42.231887Z","last_seen":"2026-03-04T12:00:40.503767Z","times_seen":16,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":363,"dns":94,"connect":12,"send":0,"wait":20,"receive":0,"ssl":257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/captcha/loginTop.html?t=mmbyveah","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET /captcha/loginTop.html?t=mmbyveah HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nCookie: sticket=RObFkySmtPVEZsTlR; route=616a9e5db4809cfe7baed9c5732eb4e2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg;charset=UTF-8\r\ndate: Wed, 04 Mar 2026 11:42:01 GMT\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nout-line: gb-cdn-823\r\npragma: no-cache\r\nset-cookie: SID=LnCuhBHxoP8XsEd9ht3Om385lCrLMPb3MRB/Ghbx+vctXZVJBDAcVY+DubvOiujflezKnMWbYk3Guxsd8BTNgKRlnudbDtrHQ+QBdE8w3zQ5Wp8VMgM=; Domain=.wvv-6339.cv; Path=/; HttpOnly\r\nsub-sys: msite\r\ntempsid: LnCuhBHxoP8XsEd9ht3Om385lCrLMPb3MRB/Ghbx+vctXZVJBDAcVY+DubvOiujflezKnMWbYk3Guxsd8BTNgKRlnudbDtrHQ+QBdE8w3zQ5Wp8VMgM=\r\nuuid: 01600-01-00000000-17726245218e19\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1340\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1468,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x40, components 3","md5":"94d9347e4d8ca1c5dc4fe8bb038fa2f1","sha1":"7997531112baac6c4de5eec76fdc7bd834870075","sha256":"b2a07a21d33afaa6c7873fa0627875394e61f31e2bf6c22f53646789b89b9fe2","sha512":"1533b6f0a8ee87105c1f7fc817039aac7ebd2511aec7b0299ba64213ade845152e2248611cf3e9e356ab2619db11344a8f05e0f11c9e8f404adb52f0d45f3d84","ssdeep":"","tlshash":"6331b98fdb4aa061cf0209f64503279531ca598369d06e3437a188748120cf4caccb6d","first_seen":"2026-03-04T11:42:39.596905Z","last_seen":"2026-03-04T11:42:39.596905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/navbar-sub-sports.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/navbar-sub-sports.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-22c8\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 608\r\nContent-Length: 6804\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8083837360126604382\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8904,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ad1e1cd48da5ddfe3815868582636e1d","sha1":"8e6cb37e331c00e0048dba27d00a73e30a9ed7ed","sha256":"9f24411f016d2b4b54693506b3ec1337405aa5630692cb3e1c4e63275cadebef","sha512":"344d6f6a7c8b04a72503f1f655d4dbc40676e375f47787fb1196a831e1ee6c6d7746d93f41f04681fd6f5ba180c643da100c8d346db17dc1541f5346f68284f0","ssdeep":"192:Ux/U2Zootz9Ls/XbsDZUkEr7S3LRXa5a4eHpsYdjIYzG6R3DMtQ:Ux/JdLs/r3kJdq5anpsYdjI4G3Q","tlshash":"ca02bf2789d2b8325bcde7754028b8dfaaf3c5b9004c224141ad1f298544b53476f66e","first_seen":"2025-08-12T11:53:50.940264Z","last_seen":"2026-06-01T10:33:03.338179Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1539,"timings":{"blocked":1281,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/themes/gui-base.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-base.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 25 Feb 2026 06:51:20 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"699e9be8-146ad\"\r\nDate: Mon, 02 Mar 2026 11:32:20 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 05 Mar 2026 11:32:20 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13962\r\nContent-Length: 17173\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9714047322344782420\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83629,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12023)","md5":"ae436617c02061eb715fce1f6e4d84ba","sha1":"d29e23c56a6972ed8c139be8fd55022e8dc79dc2","sha256":"95be5699e27ae8ba00031ebaad84c414dbe6ab48f6445007513e072c9243eaae","sha512":"614e0041902efc437f9ef9ab63f0ee9e7d1236e0a5d811013dc75509c0669ef44b24ffefec0cf367ed241b6615b506b27a951cc17f168e7ff97f09b9564c4137","ssdeep":"1536:hh/EEJVfpLdXYSN4H1Y7B/Daf4ZxnVXCg9bI:VXYSNE+RVXW","tlshash":"0a8385b2e15824e63373c856a381fbda2554b122c5134efdf89f655c8bc738612a2f6c","first_seen":"2026-03-02T15:35:34.435383Z","last_seen":"2026-04-17T08:01:36.591141Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":5049,"timings":{"blocked":2394,"dns":1783,"connect":256,"send":0,"wait":250,"receive":1,"ssl":362},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/idangerous.swiper.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/idangerous.swiper.min.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 11 Aug 2023 04:30:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64d5b951-b083\"\r\nDate: Tue, 03 Feb 2026 14:01:26 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 14:01:26 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 11957\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2500717312187009986\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45187,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32034)","md5":"f15409fb02c527ce1f66a2fd3c4aa0e9","sha1":"1e1e1bcc0f49e99e14ba34991cffe0745178d302","sha256":"1a1b5d3d6fbfc28abe37a668abd59494208c63c5f0b5d040cf4bbbd137f87c27","sha512":"66a384d6ad5fba862e778e24c43326a718328b6f860469fb5eb69c2687b0bbdc3c2dfa9049b0e3d5509214db1dbec4477f5c3654dc04446a505379a4300d4908","ssdeep":"768:oTFZ8CkWyYzh9MTvl7prcAgQW5ppZ+rPPWRqKDyBuq0t:cZiY9uTJuAgQW5LZ+rPPWRLt","tlshash":"5613f8c1b32031a741f3626e91fecb4271f54966aa05d4dcb5ed84c41ab489a03beff9","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-06-07T07:30:11.533498Z","times_seen":17303,"resource_available":true,"data":null}},"time_used":3214,"timings":{"blocked":2864,"dns":0,"connect":0,"send":0,"wait":349,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/common.032d44c1.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:00.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/common.032d44c1.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\ndate: Wed, 04 Mar 2026 07:51:23 GMT\r\netag: W/\"694264e2-1b420\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e140d2da7966a710ba00bef37e36e352.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: o6RVdwE0KBFhI4hXaaY-gs_yfdgeYs0mggvGMMPN-oMO1m49Vnq4zQ==\r\nage: 13837\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":111648,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61590)","md5":"4d90fe732a8918235001f90a280ee3fd","sha1":"7e16f5554ebea2306f378b175c18457aed09bc22","sha256":"35d46a2ae61a964d46b8d668fa0d32e3cdb9e975f848692ebc12916b32078e5b","sha512":"0600dab872d39f5e780664b3c654b854568548399779eb614e286d39cc74030f40c63703c08161e995f45aba2aa8c9413a64b7938d81cb20eebe1dd84c8a98d6","ssdeep":"1536:9QARRaYYKZIknaW+lwfZA/AHJQZ1WpbuRIRoxkpV48KbnmrbB2L:93ZIkaWAw7KbqbB+","tlshash":"b2b33afb73c5b2f44143eb64e41b6410b42e3cbe7f9587d48255cee4b9b0099898ee98","first_seen":"2025-12-19T03:52:38.055006Z","last_seen":"2026-03-19T23:48:50.675664Z","times_seen":399,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/fserver/files/gb/1600/carousel/10585/1772241625877.jpg.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1600/carousel/10585/1772241625877.jpg.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 28 Feb 2026 01:20:25 GMT\r\nEtag: \"69a242d9-5d9f5\"\r\nDate: Sat, 28 Feb 2026 20:36:24 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Tue, 03 Mar 2026 20:36:24 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 609\r\nContent-Length: 383477\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2620489117343577394\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":383477,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d44281f6d611d556f07f59e11b5115c7","sha1":"be387b3cd37ccb9b7040da1b98f916763995c345","sha256":"1d7a63e0c19076c2d1e592ea4d923b83f078b6cf4a2873fd1de19ff3fa473f6d","sha512":"b73b502f7811a2608dddfdc5a83ea02586c5d44e566cb541cbae511f22a3d39693fd99de64e8a8e29b76f0f548acc21982be025290c34d77e346ba537951babe","ssdeep":"6144:B6RUw4o2Bj9J5apjwh/1o0Cxd6CAYhAEiv4xAUp7WlWmi07OwcDtxiPe+ajgHY:ARUw12Bj9fjo0CsY7iOAx5lcD/iG9jg4","tlshash":"d98423208a5b9d8b6f6853065a1167157e3a33dff8c859e38141fbf110e2509cbbdcb6","first_seen":"2026-03-03T22:20:04.168565Z","last_seen":"2026-03-04T19:47:59.069271Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2581,"timings":{"blocked":2016,"dns":0,"connect":0,"send":0,"wait":253,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/favicon/favicon_1600.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:05.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1600.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 04 Mar 2026 11:42:04 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nServer: SLT-MID\r\nContent-Length: 150\r\nX-NWS-LOG-UUID: 11050951573136767451\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":150,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-06-07T07:32:20.043451Z","times_seen":36060,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/index/getAppsUrl.html?device=android\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:05.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=android\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nCookie: sticket=RObFkySmtPVEZsTlR; route=169b5c290b6963ddbef067cfad367b83; SID=LnCuhBHxoP8XsEd9ht3Om385lCrLMPb3MRB/Ghbx+vctXZVJBDAcVY+DubvOiujflezKnMWbYk3Guxsd8BTNgKRlnudbDtrHQ+QBdE8w3zQ5Wp8VMgM=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 11:42:05 GMT\r\nout-line: gb-cdn-823\r\nset-cookie: route=44d17259ab44b1b54887077d522d7137; Path=/\r\nsub-sys: msite\r\nuuid: 01600-01-00000000-1772624525d8b5\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1140,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"6d5fc0ec001f4f6eb22ebf8dcfe7d2ed","sha1":"0b1c514482e2ef72830e4343d53c1b76d37a7a18","sha256":"62fae126afc93367606d3481f9d913695404907a6c37adc71ebfff3556ca453f","sha512":"3880100aca862ba2cc3e0a726845ab84296534fe9d0cdafd30832bc0913ed9ee2bc0cbadd2778e7b2ac7f967b85dcb4fd3106a0af280f75966f12d10179d9657","ssdeep":"","tlshash":"5121a7ba399c6fe446c25f8cacaf0a052c391881ca12a422bed1247007cc129459395a","first_seen":"2026-03-04T11:42:39.591008Z","last_seen":"2026-03-04T11:45:46.415538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/index/getUserTimeZoneDate.html?t=mmbyvdsr","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:00.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET /index/getUserTimeZoneDate.html?t=mmbyvdsr HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nCookie: sticket=RObFkySmtPVEZsTlR; route=616a9e5db4809cfe7baed9c5732eb4e2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncachettl: 3\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 11:42:00 GMT\r\nout-line: gb-cdn-823\r\nsub-sys: msite\r\nuuid: 01600-01-00000000-1772624520f617\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 96\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"56cd851c7ed2b8f2d1d8ef47c99ab1f4","sha1":"02c82d9aaae4fab0c66419beae6104c785a958ce","sha256":"1a975eeb018e048c6bb3b88e9cfca067b138c2d091c3bb596d1cbbbece76c382","sha512":"9932c1f087ce91fe4840edc5d5206cb03518db2a140c716dfd0bd00448ff9d8a982914239bc90d2e53e1568f4620063c5ca24f704a54e5533b63dec0dccba35f","ssdeep":"","tlshash":"5fb0926406e16e5f093080a5d624b5c94e66b12b48c2cd203b6ade1ca89ca4a1808713","first_seen":"2026-03-04T11:42:39.608557Z","last_seen":"2026-03-04T11:42:39.608557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/partner/partner-hongtu-black.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-black.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-197dc\"\r\nDate: Tue, 03 Feb 2026 09:42:54 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:54 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 79254\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9545646348043778965\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104412,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0298fe6d0aa5b489e3cda6cddcc325ee","sha1":"4f7dbdce496c21b36fdb5406592d1ec8f0219699","sha256":"98bd06ca490d5c000e797802b93323fca6de4f672c4a561099bdc6c0d7e0c093","sha512":"a110c084c85583253556ada989851ffe48a9fdfa752976ad7061b230fea6a4d685369a3303d8bea7f27512b35cae4c96d143fe61d275521a8cdcc8c4ac8f9554","ssdeep":"1536:8WIh38q9JcZYHgtwd+CJbHa835EktOC08ltxlgWIIa+uoAwQpqcZCfrW5s4h:7Ih33cyHdNzJwBmjepoAwQAcc4h","tlshash":"d8a3122dfaa06f75da22873f8255dc0481db6196dedba24a02f0ddd8cb4a7374267d20","first_seen":"2025-09-06T07:11:29.245175Z","last_seen":"2026-04-17T04:44:35.203107Z","times_seen":1734,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":773,"dns":0,"connect":0,"send":0,"wait":259,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/fserver/files/gb/1600/carousel/10465/1718882777740.jpg.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:05.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1600/carousel/10465/1718882777740.jpg.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 20 Jun 2024 11:26:18 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"667411da-10fa55\"\r\nDate: Tue, 03 Feb 2026 10:12:54 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 10:12:54 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 602\r\nContent-Length: 835520\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15918360507327128719\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1112661,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2eca394c9857d94d3f6ee78110ddf86a","sha1":"a23f7814b1b91150bc08779b9223e46de871afaa","sha256":"3d581d0f51fd693ae8bfd24457eb6aec5a59a14c30484e19a896ce702e661dcc","sha512":"3697557c397af5e0558942e64a44d38bcc6c73ab88832bc31185165faf1fe994cbb7b4331f1e0cb2706518e22f221808c1650b5a90590864e8a5a0e4d90a86ec","ssdeep":"24576:4Bgq+WnzdHONRCIcT7UCBgIrUVyuPnPzLtyNgOjMW3:4vOO4hcat8AA","tlshash":"50252334ce9b6fb11f44d570b31eba2d8e529ea2484cdac513e434da24faf095c9b436","first_seen":"2025-08-12T11:53:50.963963Z","last_seen":"2026-06-01T10:33:03.445328Z","times_seen":42,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":472,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 05 Oct 2022 09:40:30 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"633d510e-7fd7\"\r\nDate: Mon, 02 Mar 2026 09:58:42 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 05 Mar 2026 09:58:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 67\r\nContent-Length: 5207\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16113870598578431921\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (801)","md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.487698Z","times_seen":17749,"resource_available":true,"data":null}},"time_used":3798,"timings":{"blocked":3516,"dns":0,"connect":0,"send":0,"wait":279,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/themes/gui-layer.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:58.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-layer.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huf5as.pham.xin/ftl/commonPage/themes/gui-base.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 17 Aug 2023 08:10:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64ddd5e1-c760\"\r\nDate: Tue, 03 Feb 2026 10:12:37 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:37 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 610\r\nContent-Length: 6923\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2706274637777020638\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51040,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (489)","md5":"858eefc3fa70af7d0115c901908471f5","sha1":"29c181bbbc09a424f7de7cb57629bd8a9e3c679a","sha256":"9f6a77c93f998e065f1ed52eb9943a3c560a50366bba2c8a34a4a1223c793caf","sha512":"3731234bfa0b2abf45883da0ab74960a77f167dc158f4eae4f9c58293bfe6ccf322fabdbd4100bd5fdba0f463cbf18ba44d89b0bed695b65b8edce7edc9441ec","ssdeep":"384:RCEe+wekUqKrIQycnvqP9bQmAJS0OuaIHmOKpPg+2fF93sJJ:RCf+wekUqjpqCP+OuaIHmOK6+2fFVSJ","tlshash":"67330d22a16816cd7156eac8705dbab7b7fc8c02e21717bcf8ab304fd28d5439476a47","first_seen":"2023-08-17T12:06:57Z","last_seen":"2026-06-07T07:30:11.53439Z","times_seen":16311,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl//commonPage/themes/images/hongbao/icon-close-1.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:00.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl//commonPage/themes/images/hongbao/icon-close-1.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Aug 2024 04:00:08 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66b2f148-2023\"\r\nDate: Tue, 03 Feb 2026 09:42:53 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:53 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 6277\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3531148116314746961\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5ff41d2becd0689589fd8afb58c0913e","sha1":"9f463b57b27260b19c93d533046f893360933d76","sha256":"7f97dfd7455fb76be00f454b95e3b28c114f9164b49a504bf34200da41d9db8d","sha512":"d502dc1bf29166726ba9183c01efa1b698dcbf22d79de614a4772b4150add3f308d597732844c9febef77b1d85568604b729f2c16e4c66f2f86b0b724fdb4d72","ssdeep":"192:JkkBHNqwnjSJuxF1drKn9K79LDQXFj4NLaYQ7ar/:rBHI8BHkn9Kx4+LhQ7ar/","tlshash":"4d02bf013bd42b6a1dbb10d3f1684da88c83819232f43d99371fef7b658812c6253a68","first_seen":"2024-08-07T18:17:10Z","last_seen":"2026-06-07T07:30:11.528883Z","times_seen":9329,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":514,"dns":1,"connect":256,"send":0,"wait":260,"receive":1,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/websocket/PopUp.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/PopUp.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 21 Apr 2022 04:30:12 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6260ddd4-828\"\r\nDate: Tue, 03 Mar 2026 00:39:19 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding, Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 00:39:19 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 611\r\nContent-Length: 797\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16369397519763540021\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2088,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"07864ad2e2759d53f8f2f14dd4295bd9","sha1":"95144219e2eb702c4c4a707c3622b086876cf41c","sha256":"871bf30791bb89605b61cea815c3786246274b65ede3b8a8b8c2dd9244cfa89d","sha512":"f469d0f23c75e918d55e076d72481fca7043ac5eff9025aaac1f26860d080e4fc3c5d28f8f9ee1dae80719aca2b83f39ea82a129c221980bd7d63c212bacc119","ssdeep":"","tlshash":"9041ae54baf359a12c9b71f3aaaf30413160f2479505ed017d0cb9945f1d228b2cf7e9","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.504581Z","times_seen":17518,"resource_available":true,"data":null}},"time_used":3227,"timings":{"blocked":2980,"dns":0,"connect":0,"send":0,"wait":246,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/mobile-api/v5/chess/getActivityMsg.html?function=sign","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET /mobile-api/v5/chess/getActivityMsg.html?function=sign HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nCookie: sticket=RObFkySmtPVEZsTlR; route=616a9e5db4809cfe7baed9c5732eb4e2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 11:42:01 GMT\r\nout-line: gb-cdn-823\r\nset-cookie: route=251410696cadec6a5b6c74aa4706df12; Path=/\r\nsub-sys: mobile\r\nuuid: 01600-01-00000000-177262452180ac\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"5d062bc93ef9d75b27e852ed745d170f","sha1":"1ecf82a0589608b26ee6a29b2cc3229916596626","sha256":"26e77aa8c61c230db13c8fd74d4ab3adf8be54c3192c4e16f94e633a71efc2e1","sha512":"44400ff6867b380b16fdfda60ff144dfcc9bc4d7adc38c84a98f20d2a8911304f694eca3afe2cf9ce9538a7c49b1fb471694b4b68215c6ccc6027571b8b5ac34","ssdeep":"","tlshash":"f2c02b86f21818b38b030bd010e83d41c3fd11b2c0c84848dc4c8e4802b48ffd301837","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-06T23:51:10.815511Z","times_seen":7427,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/logo-via.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/logo-via.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nEtag: \"6670e802-378\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 608\r\nContent-Length: 888\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12691452293934728568\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":888,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"aad3daf599ee95e422572841b1a75e22","sha1":"a1e2f345995731d3779bdc6fe6d0d4dc491bad92","sha256":"bbe277fcdc4cbca3974ec9f6b7243d705b80e0a5982131f4f96ff70a6c679b2a","sha512":"b88f5cfba0b7623b9f73b9617eff770e2d18fa8bc57b59c4debc47c38beb6350037950056200752521042fb6a95af7cee92aba93fafeb20f3f116a3412e7d094","ssdeep":"","tlshash":"2d11603f08a8cc0452a98e4eba22419ecf23b020f58ddd611f2c261123ee842d84a1cd","first_seen":"2025-08-12T11:53:50.934091Z","last_seen":"2026-06-01T10:33:03.443484Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1782,"timings":{"blocked":1534,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/index-mobile-sport.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/index-mobile-sport.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-ec408\"\r\nDate: Tue, 03 Feb 2026 11:36:14 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 11:36:14 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 11766\r\nContent-Length: 735732\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7588448723746160147\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":967688,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b8ce311ab78873cf6b7add79f320c6d6","sha1":"a6b44a5062f53aaa127d926ce35a2029fa861fa6","sha256":"ab5fdb78bc0c9ceda26024509b99d11f4c1756c4b1783a298f6790e1d79846d6","sha512":"f099b3fc58be5b8012bdf1a41d285c9b1831b8967295e51d742a2568ace632bb34382cac5c366b87fa826e54b8f747d98d2fc7f572eb2b730bc7b73d5df30854","ssdeep":"24576:e6A+sg22yfnVLdzxpL7ww7SI9dOCyq7HWzm:VFIttvMq2C","tlshash":"3e2523246cb93c2a064480fe60e727d40bd90f2d48e8e095bbc5d6c59a97e1ecf7e607","first_seen":"2025-08-12T11:53:50.946617Z","last_seen":"2026-06-01T10:33:03.380811Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":941,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T11:41:54.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 11:41:55 GMT\r\nout-line: gb-cdn-823\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-html-cache: HIT-3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}],"data":{"size":597443,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9d300197e8c7978edd8f6af551438c8b","sha1":"f1f6942c493c1b082f0e2b3cdc7306241f2a24c4","sha256":"5f7a9e39a5fe6a015c07bac6db08323fd9e451ef556ef57bfed9392cd21cfe3b","sha512":"361f63cf2f6db75e9c3f9d135f63444b6ae64fd63f03015d57daaebd1b09ed3a668909b380263b227f5e9fdb50fe7dc064db4200fdafc15393dee8546e19d620","ssdeep":"3072:NXbK678/DfD2l/DYzGKsM23fwgyEtd0n9bdi0LhnaqQ0vs2ko4MZwCh0gguJajF:VbK67MDgd2bdisan0vsDRMZwCh0duJah","tlshash":"39d4b50436f300b71573a0e546bb37097aa1e107de05dd08bced9ad49f96ea17263eac","first_seen":"2026-03-04T11:42:39.619649Z","last_seen":"2026-03-04T11:42:39.619649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1186,"timings":{"blocked":432,"dns":1,"connect":212,"send":0,"wait":321,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/websocket/Comet.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/Comet.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 19 Jul 2021 23:50:13 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"60f60fb5-43bc\"\r\nDate: Tue, 10 Feb 2026 06:48:56 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding, Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 13 Feb 2026 06:48:56 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 4031\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1228830574664242082\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17340,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1008fe6a5e1a182d7775963b85405bb2","sha1":"e174a7b08cc3cb5545af1cd33d2814e604119392","sha256":"7479f6f22194ac37dd6d3f5a579b4682ac8dcb6389fb961cf4140f3fcc707a20","sha512":"26e07821ee1e8e94c4bada028e049df7572cac06f2e8dae958baa7a011eb201a6a1d4ed0cfa15017a3f52a0cb949343de0b33ca6da7c245f763c86d5adfb0223","ssdeep":"192:4Pf+aTbLSru4NyRs8VDv1KygOdWuTyVC3d7QPXLHOm8cSCl1Ej7bY8l7YJIJvO5N:4Pf+aTbe4M2cXzsjDUfj","tlshash":"ab721e4a2cf76086552732b90f5f64543235a8172605e91c7dcca6e08f98b7c1babff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.494719Z","times_seen":17452,"resource_available":true,"data":null}},"time_used":3137,"timings":{"blocked":2875,"dns":0,"connect":0,"send":0,"wait":261,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/partner/partner-hongtu-white.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-white.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1aab7\"\r\nDate: Tue, 03 Feb 2026 09:42:51 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:51 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 82844\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3853062467925662845\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109239,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"050b6873c440d2c512d27f83bd536ba3","sha1":"3f1ef3c0eb4037170fa7dc0fa5f6f8b667eef5e9","sha256":"cab2392ea2953b735b5410022f07d4590018ca546e1fe21b2feab5db0a4e69ad","sha512":"562cc6092d643d8b5487bb406860661b215d8c94d4a51c63aa9a6823fbe6533acbf95133d385781c9ea5f8913adfd26810e6903296b2106ebed51c4c4ccf2331","ssdeep":"3072:InJWQnDraF6gDT3Kxms0QQ9OPMGJrcPaF:9SDu3DMmTrQgPaF","tlshash":"50b31216b50e3e0f2b55dc0f514ee9f6cb920786850deece4768348462c9e85c3df999","first_seen":"2025-09-06T20:06:14.275441Z","last_seen":"2026-04-17T08:59:04.373557Z","times_seen":1773,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":185,"dns":0,"connect":0,"send":0,"wait":259,"receive":298,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/agent/joinus_btn_on.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/agent/joinus_btn_on.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 21 Jun 2024 07:50:25 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"667530c1-498\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 608\r\nContent-Length: 959\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13595998898760883185\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1176,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2000bd1b2023f1cbc9125797b4a5e04e","sha1":"07bfca7fb02eea28fe23cf697036db32f0d00555","sha256":"c1072086bc4b78373e35b26f97805353529667aec83487722a2d55451e0466a2","sha512":"d76629eceb7b4b80927690d92dfc86789fea66d8543f2a71c97df06a912cf2dfe121cc76b13971ed5d2771f6f1ae9785a659029a5aaf58b83ed70767ef3500e0","ssdeep":"","tlshash":"9521d70c15463d635f8ecab937a391692a529cf94f57a582df2fba036358200ef80980","first_seen":"2025-08-12T11:53:50.925373Z","last_seen":"2026-06-01T10:33:03.379712Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1445,"timings":{"blocked":1181,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/style/ued-index.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/style/ued-index.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 17 Dec 2021 09:48:20 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"61bc5ce4-4cca\"\r\nDate: Sun, 01 Mar 2026 05:56:01 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 04 Mar 2026 05:56:01 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13962\r\nContent-Length: 3323\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5201623688838715725\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19658,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"96eaeb9e934b6ca60761829e86a09f85","sha1":"41246508f941347a22413b6cf47c6f652630ebba","sha256":"fff2d8d1f4590e15d9c23fbe63593a763cdbf9581c64941573d755a1d2e153e6","sha512":"9c99c616209bddfc062ad5ce25a0dd191ed4c2ece8ad928790ac6d4b113b1c80bd61516fdca5ae5bb8eb749273574c1038aed242d1eb5e8b182ecfd5967974ac","ssdeep":"384:12KqzVgT3/6+qkx2Rqa1hbS860iAkFidS+rY18wJGvzBCn4cQpmY:12Kim62GqyFiAkFidS+rY18wJGvzBCnS","tlshash":"8292a9994541320ce033c36aa6c55748193dc547e9b30eef736a3eaa76530a92173feb","first_seen":"2025-08-12T11:53:50.964977Z","last_seen":"2026-06-01T10:33:03.41219Z","times_seen":45,"resource_available":false,"data":null}},"time_used":2885,"timings":{"blocked":2635,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/partner/partner-hongtu-silver.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-silver.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1eb1d\"\r\nDate: Tue, 03 Feb 2026 09:42:51 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:51 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2738\r\nContent-Length: 95601\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14083432189760759198\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":125725,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5f6980b5f154060a1d83407f4c95b0a6","sha1":"62e410c7edcbbdcb24a07444f9ebaa79a4047f92","sha256":"522e1c9e3407783f021aa3d7b4c19179ee6d2784358e8dc3960fdd93e996f720","sha512":"ffee4c4b7962e3b1ab48896394cc18e7ed3eb1d199a56e4bed2c29934b20ee1706619969ac82a3c6840cb1b617f90d7c16a9c7080b2d8c1a905be0f5ca922206","ssdeep":"3072:uVcAUgIZn4dMj6qCKK2si2pXQ5kbTSfE2BBsUdSTIC4RvJ:uSAUnmD2AgObTEE27fdR","tlshash":"20c313e136ecbc5cee44d632a5ca9960c250abde89f1c48bc6da50ca141335c9dceedd","first_seen":"2025-09-06T20:06:14.266784Z","last_seen":"2026-04-17T08:59:04.285034Z","times_seen":1773,"resource_available":false,"data":null}},"time_used":1199,"timings":{"blocked":788,"dns":0,"connect":0,"send":0,"wait":264,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/plugin/js/ued-index.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:56.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/plugin/js/ued-index.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 27 Dec 2021 01:47:54 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"61c91b4a-1fee\"\r\nDate: Sun, 08 Feb 2026 12:14:13 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 11 Feb 2026 12:14:13 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13962\r\nContent-Length: 2310\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11147222413785227706\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3675b2750bd000949ffb8a5ff2e85ff9","sha1":"954f4018df5f82d9827f45d2135d54126e964e25","sha256":"69c2284bc7748c73a3c647e1d322e262e29ba8f572736ebb62134d62098f9edb","sha512":"c1397aeb9a931b6ff3147ae4c651c49c6cfe20e50578c56f1e045d620c5c28ea27a4e2060f49431d5d01a6d742b71e45a50de7a578d8f541246ae1f141847c2a","ssdeep":"192:5g4gicCLfixYZLZloX+rifQEw/5RNx4NPqfEyByQag2:e4gCixY+X+rnWP","tlshash":"25f10308f5f719b4a4b730398b6f49002977901fa80ace4c7d1d95c80f9952cdaadfba","first_seen":"2025-08-12T11:53:51.006652Z","last_seen":"2026-06-01T10:33:03.391499Z","times_seen":45,"resource_available":true,"data":null}},"time_used":3882,"timings":{"blocked":3611,"dns":0,"connect":0,"send":0,"wait":270,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1beff\"\r\nDate: Tue, 03 Feb 2026 09:42:51 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:51 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 8598\r\nContent-Length: 86899\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15311433234244221810\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114431,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"13705bb454fa93a337d360fde95d32ed","sha1":"f17931976273af97665c359e14c5d7b673ded90b","sha256":"221a4adff18935e8dd8d421dd0dfb431bab972377ff4ead01e00cdc9dbf73127","sha512":"fc3c18262e7afc15b4716e6ed6869f20c27749dc181e010736e5314d0cc96d33826337eb3198e8425dbf01766d7c7cd2d85ce3cf594c4509106540464dda76a7","ssdeep":"3072:d1tyThaOfU3ozO51gip4i02XfacJ7TznFNnOOa:d1tyT8cUM5hcRnFVW","tlshash":"20b312a0dce07db423bb950ca3bc9f186243145f03a6269321b3f5430d627a4a6fd772","first_seen":"2025-09-18T16:22:49.418873Z","last_seen":"2026-04-17T04:44:35.216553Z","times_seen":1726,"resource_available":false,"data":null}},"time_used":1449,"timings":{"blocked":1136,"dns":0,"connect":0,"send":0,"wait":309,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/bundle.7126c698.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/bundle.7126c698.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 04:53:12 GMT\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\netag: W/\"694264e2-9819e\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e140d2da7966a710ba00bef37e36e352.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: X31byEWOdQ-ny3pcCUyks7Qe9_3qtLjdgtQ5RmjXQ_D7YxF-aLixbA==\r\nage: 24534\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":623006,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65422)","md5":"03585f467dd1043465e62024d84e8501","sha1":"1e5cf8a55c64abec323fd2af7e5823a22b4c18f0","sha256":"4cbd5c79ff097907e8a54d23154bef1b9b8db97a75ec78fb7f7fbc994e723353","sha512":"3c0bfd9bea584f9bc4acdac9815c499327a54479686c2b5e8189517433d9913de43dea480a34577ca551a0327e4d2cfd2271d6c598d4994b99119261805e46a4","ssdeep":"12288:nAQt366fCmXM7t36yfCNXYpnjhftWhS4V:ACfCZbfCSntwjV","tlshash":"68d41898f081b42856736161b2af360a7236a916ba4d4468f536c1f4bdf60cbd323fdd","first_seen":"2025-12-19T03:52:38.036277Z","last_seen":"2026-03-19T23:48:50.648715Z","times_seen":399,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/favicon/favicon_1600.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1600.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 04 Mar 2026 11:42:04 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nServer: SLT-MID\r\nContent-Length: 150\r\nX-NWS-LOG-UUID: 7491671930059062458\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss, Cache Miss\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":150,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-06-07T07:32:20.043451Z","times_seen":36060,"resource_available":true,"data":null}},"time_used":3323,"timings":{"blocked":1692,"dns":0,"connect":0,"send":0,"wait":1630,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/fserver/files/gb/1600/carousel/10297/1714962137971.jpg.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:05.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1600/carousel/10297/1714962137971.jpg.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 06 May 2024 02:22:18 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66383eda-692c9\"\r\nDate: Tue, 03 Feb 2026 10:12:50 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 10:12:50 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 604\r\nContent-Length: 325326\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4612656548337869477\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":430793,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d6239db92ed1e0297a6e3067b0088559","sha1":"5f16557297077fa3325273285f0caf525df78af4","sha256":"860180b3501d0f2ac52eb5aabac21785549fd91837b88a871c62d03d625b52ca","sha512":"633ed5a005fc32db72f6aeb76f8d13376d55ea4787ccd64a55bcba074f7bae6635d1dc4ba0c1ef1dddb5b22094e2a00e8988edb9b5dd4e80da17a7850731a2b2","ssdeep":"12288:zKeQBnIDdkkomfub5iKdNJWVNj3p7VCW0b71f:VQBn0dkRv2p74/bF","tlshash":"699423b0ea056e150524e4ce12aa7f0fd7815fd1f08d5bab81cb7e4e71e6b508c2e879","first_seen":"2026-03-03T22:20:04.139204Z","last_seen":"2026-03-04T19:47:59.009407Z","times_seen":20,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/index-mobile-sport.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/index-mobile-sport.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-ec408\"\r\nDate: Tue, 03 Feb 2026 11:36:14 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 11:36:14 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 11766\r\nContent-Length: 735732\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2286296246034571442\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":967688,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b8ce311ab78873cf6b7add79f320c6d6","sha1":"a6b44a5062f53aaa127d926ce35a2029fa861fa6","sha256":"ab5fdb78bc0c9ceda26024509b99d11f4c1756c4b1783a298f6790e1d79846d6","sha512":"f099b3fc58be5b8012bdf1a41d285c9b1831b8967295e51d742a2568ace632bb34382cac5c366b87fa826e54b8f747d98d2fc7f572eb2b730bc7b73d5df30854","ssdeep":"24576:e6A+sg22yfnVLdzxpL7ww7SI9dOCyq7HWzm:VFIttvMq2C","tlshash":"3e2523246cb93c2a064480fe60e727d40bd90f2d48e8e095bbc5d6c59a97e1ecf7e607","first_seen":"2025-08-12T11:53:50.946617Z","last_seen":"2026-06-01T10:33:03.380811Z","times_seen":43,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":235,"dns":0,"connect":0,"send":0,"wait":249,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/moment.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/moment.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jul 2023 06:40:10 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64b633ca-1cab9\"\r\nDate: Thu, 19 Feb 2026 18:33:53 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sun, 22 Feb 2026 18:33:53 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4139\r\nContent-Length: 26968\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6564136862821652184\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117433,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"36c8f828395a9395549bd6e7307cb7e9","sha1":"f30a4961558e2d3d4405e7d93aa28fdb63245e78","sha256":"5d5e32fa1e06a0bc9396f349d142ad248e82086543e438c890e43f41e692db33","sha512":"40c24a9011e1bbdd98bd95b341c400bdaf48fefd953fcb407368fe3c685ac09196b55e230c03ca9890c35fe9acef2c916bed52423dc1a7b532a1db9817c03a8e","ssdeep":"1536:qOL1yBkBeb9wNoHpH7tjl2Ulwjwaj2BH3fMobEKeYEoZYiMirUw0:qOCWeH70R2BkobE+cw0","tlshash":"aeb35f5a59e31023496362294fdf2011ba388123590dee487d8da3d49f9ed7c47bafec","first_seen":"2023-07-29T10:21:40Z","last_seen":"2026-06-07T07:30:11.501958Z","times_seen":17482,"resource_available":true,"data":null}},"time_used":3748,"timings":{"blocked":3457,"dns":0,"connect":0,"send":0,"wait":289,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/float.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/float.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 26 Aug 2021 07:50:18 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"612747ba-1b2f\"\r\nDate: Thu, 19 Feb 2026 02:52:00 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sun, 22 Feb 2026 02:52:00 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 1929\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17931638225867410666\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6959,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"829af863b0cdc4a603919824ae046299","sha1":"1d417b1553e4ecb7125ebf2005b74255291fbf73","sha256":"1dbe4afbc9ed220c08b9e95577b56f83e2e8e0f7620c5dc18266bb325e5bb271","sha512":"e1202fa26fd353dfb2f989d3d45512e0691c062076297399f5fe62f63e7f5b194fec4a3d7fe2f09be1a6a945e197e7d68445d33dcc6f80b23a315112d9ae5b6c","ssdeep":"96:G4SXFXVXDL+R5NxuHie/moRUgIm/Kv3RKXg+Iw3qCNv5IC80b7Yr+HpH:G7xhDL+jNxzeBVLKJ1LeqCwCxb7YspH","tlshash":"04e1506e03b1212195aff1beaf1e424c6631905b2507dd057e0c87c46fa493c4636fee","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.51234Z","times_seen":17483,"resource_available":true,"data":null}},"time_used":2974,"timings":{"blocked":2669,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/app_btn.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/app_btn.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-1918\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 608\r\nContent-Length: 4939\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4770520280659601110\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6424,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b4f1e9bab3a9bc7a787d461e4a43daab","sha1":"019ddf4ddbec87555e4e29d1b65b00972c692e61","sha256":"577f16411856c774936a6cf5c35b5e805daf08283edac9017f078a7387a604b0","sha512":"b6c00ac13f3f8222c35abfd32df8a4b9f5993bbb006099e5aea5b1cbd4b0281c057f6ebc533ff5545276f31ada2cc4d18621b29bf53098bb98160553cb98893e","ssdeep":"96:XDtynWPVDchXqNmEOFBMcHkffopih8842Ve6/OUwnELhjz0D0oKAtY+eVWxvNj:xyWP1ch6I7Mc6MihJH7xt0Dd8m","tlshash":"11d18f74361e1956fcd7884d9033b943ccf2bd8a555283b16b5054f7bd9a03b41c22bb","first_seen":"2025-08-12T11:53:50.929822Z","last_seen":"2026-06-01T10:33:03.43601Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2018,"timings":{"blocked":1770,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/prev.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/prev.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nEtag: \"6670e802-228\"\r\nDate: Tue, 03 Feb 2026 10:12:55 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:55 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 600\r\nContent-Length: 552\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3921379213646304919\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":552,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2324dca920811d8301a3904ba8081517","sha1":"a0fd11216533dde3e4888d7d91ac76fc0b9116fb","sha256":"e551e341343bbe133cf87e2a7bd80559b31b5686bfa01d61d303afef8cced999","sha512":"eeb674eb42be998296a005379b21c28b4d70c57c6995e030a5c648c3a483b4681a15b7460da8790f133369dc2aca6162bdfc79c769ae2f38f60d3bd36d8e9ac0","ssdeep":"","tlshash":"68f0dce818038d6fd3cd1c48136c20333de34bd8e9206224bcd90c890ae33acc88b844","first_seen":"2025-08-12T11:53:50.945592Z","last_seen":"2026-06-01T10:33:03.409476Z","times_seen":43,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/mobile02.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/mobile02.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-2b34\"\r\nDate: Tue, 03 Feb 2026 11:36:14 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 11:36:14 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 11766\r\nContent-Length: 8362\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4910076730423247554\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11060,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"9bfd278717026a3ee57d644d779a25cf","sha1":"20c865dfd20fb354aeaf83c4584499e9dd2189d0","sha256":"58515f79a9043a83b632a6f4e34bee354cb96a3cf61db82efec98ed06b0a7f02","sha512":"e31259d680cc6006ddf6bb39280d1f4b17df9d15491b31af27aca6a0029975c64d410973b97fef70b292f4dec38d96e831650e531449da705dff091d90c8ef5c","ssdeep":"192:MhM+ef4oQ5TOEBBRy6HeWGM2JUvimCN4DdZJBpHykGqJoGTBmD16D:CvX7G9EmuDHp8qwD10","tlshash":"dc32bf78b2885652c1e61264c3b81e71de8c1da5caca3c6220e1b78d92f08fd2d63737","first_seen":"2025-08-12T11:53:50.949726Z","last_seen":"2026-06-01T10:33:03.394609Z","times_seen":43,"resource_available":false,"data":null}},"time_used":948,"timings":{"blocked":633,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/style/common.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/style/common.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 27 Oct 2023 07:35:04 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"653b6828-95ea\"\r\nDate: Sun, 01 Mar 2026 05:56:02 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 04 Mar 2026 05:56:02 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13962\r\nContent-Length: 9065\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2137556697623383030\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38378,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 (with BOM) text, with very long lines (644)","md5":"d74bbea0ff08945c2871595d194756db","sha1":"bf8763d586bebaa1c43f691c90b43e66ba9c5d38","sha256":"5a0bee67febe308fab5025a61009563bf1aa5fd51c9e9546f66eb8a928f708a1","sha512":"6f2e2d8c308ad82447c127d38c3ccd92d30e173f4ed6bbe5b4dd36fceebf9313d6f9c4b77f5fd7ee866d916b670df82639e16164a57563f610ee7fe9e56f286b","ssdeep":"384:JxsYR0M2E5JCPvEvFG45EGx+5+RIh75CGK14AZRwD4KFDTFmkX7AfEK0UUgyyt:JKYEEJKEvFGOb8+RI9yiFhAfEK0UUgr","tlshash":"e403b535d551361fb51be06af8a49bea1139c00fe2331fbef5743628a64b2881537bc9","first_seen":"2025-08-12T11:53:50.980183Z","last_seen":"2026-06-01T10:33:03.415172Z","times_seen":45,"resource_available":false,"data":null}},"time_used":5043,"timings":{"blocked":2385,"dns":1781,"connect":263,"send":0,"wait":261,"receive":0,"ssl":350},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/plugin/js/jquery.knob.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:56.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/plugin/js/jquery.knob.min.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 09 Dec 2021 03:51:43 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"61b17d4f-5223\"\r\nDate: Wed, 04 Mar 2026 00:13:58 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 00:13:58 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4139\r\nContent-Length: 4767\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15309255556116999097\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21027,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"54eb30d6c51e96d665acc4746eb6a910","sha1":"a41e96990852cc2d44474c799bab19572ceae57b","sha256":"0dd21d95d8d3f8ffdb60698e5f8f21555dfaaf4d3f28bad0a19e1e6b755a74f3","sha512":"d74254c5e52bf4066c0ea52633d98ab38d5e3aa6dea1112d3a60bcb08f5420dda15127b855375519f7bef7141872269cd29ebd4b38dac2fb0f52602def5b5715","ssdeep":"384:CXPQNneZeIb+0ocdO6DPWC4uwa5kVGqgb4BZGkA4sk:KOeZ7oBMkVGqgMBQ8","tlshash":"ed92ea0f67ee2036d613a0ae4f8f92466622c81f1547c90d3d6d96e05fe09390676fbc","first_seen":"2025-08-12T11:53:50.990373Z","last_seen":"2026-06-01T10:33:03.354841Z","times_seen":45,"resource_available":true,"data":null}},"time_used":3863,"timings":{"blocked":3599,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/fserver/files/gb/1600/carousel/10473/1724854741136.jpg.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:04.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1600/carousel/10473/1724854741136.jpg.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 28 Aug 2024 14:19:01 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66cf31d5-88fe9\"\r\nDate: Tue, 03 Feb 2026 10:12:44 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 10:12:44 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 606\r\nContent-Length: 423828\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16720408655465754388\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":561129,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"504f4c0f4d16ca25c71467cd812f7ea0","sha1":"8bf2dfd49e728da7b38b57f4e0e7a00d181d103b","sha256":"3eaa20a9845dc502c68385c3555aeb39b23677cbce30a8d83c9d12a03c7069df","sha512":"c2d3c72e9a37694490a3ad5fb8de7a0403d9f995db2baebc551f08887a672821e8d1a83a9deff9244a37301bf6fdb046d6b0b0894c9605567f9ce52403fa4f9a","ssdeep":"12288:Iy7NzlvNgPf5OcFUC0Iqe7TgVEaayJ3e48GlM03AZPmfdy:zt3sKIxTgVFBJ3ezD03WOo","tlshash":"22c4233092a638228c19d831545ebd8b2ef556ee95cdcfa174a02e8e15b4714cfbfc9c","first_seen":"2025-08-12T11:53:50.993371Z","last_seen":"2026-06-01T10:33:03.382673Z","times_seen":42,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/style/ajax-loader.gif","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:00.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/style/ajax-loader.gif HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huf5as.pham.xin/ftl/ued1600_02/themes/style/slick-theme.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 04 Mar 2026 11:42:00 GMT\r\nContent-Type: text/html; charset=utf-8\r\nX-Frame-Options: SAMEORIGIN\r\nServer: SLT-MID\r\nContent-Length: 150\r\nX-NWS-LOG-UUID: 11347378068260246864\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss, Cache Miss\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T13:09:49.815178Z","times_seen":16212590,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":509,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/bootstrap-dialog.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/bootstrap-dialog.min.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-4ea4\"\r\nDate: Wed, 04 Mar 2026 01:14:21 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 01:14:21 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 5007\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3044872420626859737\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20132,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20132), with no line terminators","md5":"5ce8851dc823429a42ab6147554403cc","sha1":"28f381f0e0aa4f5d56690e65723bd97fb59a38e6","sha256":"dd1edf5e54071903c4c1e81e33636444899d645df6b18bad22249da07f91c811","sha512":"f42a4d48c666d9c78fcb6c6061141452899085c504bf15e23749611dda00b6913e75ebbe47ca436a2ed016175d0918f193e474f13974a2f6a5304e18909a87ee","ssdeep":"384:3ai3F3N3VKUINthDa7Vnq86z3JCDKSz1m0hMtkJI2Cg0WEUOv5Dq:T3l3INthDu1YCDKS5flC9m1","tlshash":"6a9261ccb2d9b54c47abe072143f200df03a996951496119bc79e9ebecf060aa077f79","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.501287Z","times_seen":17548,"resource_available":true,"data":null}},"time_used":3467,"timings":{"blocked":3202,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/061410/rcenter/common/static/css/gb.validation.min.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/static/css/gb.validation.min.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 05 Oct 2022 09:40:30 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"633d510e-2d52\"\r\nDate: Mon, 23 Feb 2026 06:21:50 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 26 Feb 2026 06:21:50 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2737\r\nContent-Length: 3788\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4160053825493786389\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11602,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2295)","md5":"12630e8fd95b53f705159b9cd1c2b372","sha1":"1be26841536b82ff280211796e9de339c642795f","sha256":"2c0c712726319f142f14ea06ccdba0ddb9f880571581ab1d0c193d4083a5baa8","sha512":"3084c7d3f917e379235e29b0f641e69f7a9a89b9c30b088292e3b3800cc67e16414b2df9aed1ed144cd2c37bbd035a8f6389d71ace13d17dd32a315c7719a88b","ssdeep":"192:zyzNcfuLLpjyFp291taF4lcrCQ4RFvVhkxP4OKyptj6ZqQ:znmdyF24F6crCQ4R4P4Dx","tlshash":"ed32a673ba220244790d9d442f46ee02bb1b40176a4f8eabff91786cdf825c9b67074c","first_seen":"2025-04-07T03:18:03.798848Z","last_seen":"2026-06-07T07:30:11.495586Z","times_seen":10770,"resource_available":false,"data":null}},"time_used":3893,"timings":{"blocked":3626,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/agent/more_on.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/agent/more_on.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 21 Jun 2024 07:50:25 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"667530c1-74d\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 608\r\nContent-Length: 1421\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15998361258482270496\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1869,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"3fdfd289642b8100a70b18c49a3ad380","sha1":"1e69db93ccc9c6b3040dfcf5f0de1d312768a75d","sha256":"1ae6200516c8a6e1b2d759e64454beabc77ee9a18cc78d3925704ab961089521","sha512":"ed3bd14293b53fe1f9e66db6361d8b491e2d3060a327f358941922d190b5ebce6ea53abfb348d2cec0dae8468668dc7b5a1272b0c9d2b60263c4da4501902fad","ssdeep":"","tlshash":"1c31f9371b97277164c536efb482a3860ee54109e2c241d1688828f58ecfa390ee0c7b","first_seen":"2025-08-12T11:53:50.991434Z","last_seen":"2026-06-01T10:33:03.393528Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1589,"timings":{"blocked":1262,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/fserver/files/gb/1600/floatImage/214/1770783051814.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1600/floatImage/214/1770783051814.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 11 Feb 2026 04:10:51 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"698c014b-165c5\"\r\nDate: Wed, 11 Feb 2026 10:03:15 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Sat, 14 Feb 2026 10:03:15 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 69242\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4280117730441942794\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":91589,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7b29359233a49ff80cb137144c1acb76","sha1":"9f1a467ba6ca87bb66c7f6e52f08dcae779c909b","sha256":"eaea0bc420c5bd2ff75e5557f110ba8ac1a0847875b20d58392101d8242af5e2","sha512":"f6d17fdb0d6329945a63a0c89d10bc703868be7409830a15301f78adba304e731907ef29c2221489d2aab504ac347bc12a4a39228e44869441935490e388e9cf","ssdeep":"1536:8B++46ky9F1gQvUtGoJMZxcSpo7lfagz/bOWiuYCTR9UbVeruOieDApvDIk:r6R9F1AX6ZaSaa0/B1ebVuuOieDAKk","tlshash":"349312ac929d0f8b2cede0811d1a9c665ec45b09f607b3b7247d29e7a8544d409cf8df","first_seen":"2026-03-03T22:20:04.140624Z","last_seen":"2026-06-01T10:33:03.365219Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":707,"dns":0,"connect":0,"send":0,"wait":315,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/fserver/files/gb/1600/floatImage/214/1770783051938.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1600/floatImage/214/1770783051938.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 11 Feb 2026 04:10:52 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"698c014c-18aa5\"\r\nDate: Wed, 11 Feb 2026 10:00:20 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Sat, 14 Feb 2026 10:00:20 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 2338\r\nContent-Length: 76361\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13914965377050102311\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101029,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2b5ff9d8356599e43676558d37384e68","sha1":"11de61d5b42c21fb9e89f23ce2df5ee495830d1b","sha256":"7e06a2a5e999618810f79e4f0310bcf7a45d467f3fee52d59371d324f664e239","sha512":"4697df257c1d5de9167943576cd1b42558072244e17cfac792c9e3323a2203914ca652f63789c170ac33ec5bf7f56ef89808158719268f962d4a0c96dc867b15","ssdeep":"3072:TFaBA3pu9jeBotnb4BFhLHwCpAP6OvfER7U:kBAeMDwpP6OnEU","tlshash":"f1a302405fe6b58ea029b54de4d91623ac00cbcab63be0ce70e564676077b82396f359","first_seen":"2026-03-03T22:20:04.087467Z","last_seen":"2026-06-01T10:33:03.326148Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1069,"timings":{"blocked":785,"dns":0,"connect":0,"send":0,"wait":282,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/mobile02.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/mobile02.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-2b34\"\r\nDate: Tue, 03 Feb 2026 11:36:14 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 11:36:14 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 11765\r\nContent-Length: 8362\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17221807725794882558\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11060,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"9bfd278717026a3ee57d644d779a25cf","sha1":"20c865dfd20fb354aeaf83c4584499e9dd2189d0","sha256":"58515f79a9043a83b632a6f4e34bee354cb96a3cf61db82efec98ed06b0a7f02","sha512":"e31259d680cc6006ddf6bb39280d1f4b17df9d15491b31af27aca6a0029975c64d410973b97fef70b292f4dec38d96e831650e531449da705dff091d90c8ef5c","ssdeep":"192:MhM+ef4oQ5TOEBBRy6HeWGM2JUvimCN4DdZJBpHykGqJoGTBmD16D:CvX7G9EmuDHp8qwD10","tlshash":"dc32bf78b2885652c1e61264c3b81e71de8c1da5caca3c6220e1b78d92f08fd2d63737","first_seen":"2025-08-12T11:53:50.949726Z","last_seen":"2026-06-01T10:33:03.394609Z","times_seen":43,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":317,"dns":0,"connect":0,"send":0,"wait":318,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/style/mobile.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/style/mobile.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 09 Dec 2021 03:51:43 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"61b17d4f-447f\"\r\nDate: Sun, 01 Mar 2026 05:56:01 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 04 Mar 2026 05:56:01 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13962\r\nContent-Length: 2881\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 843564611960635564\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17535,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (442)","md5":"8e7913789d81345ce224e6b11117a4e5","sha1":"31db8fdbbc1f9e9a45e74f3a76b3ccdeb90efcd4","sha256":"e390174696e01298885561fe9d29c9f1979cfba83bc27cabd80b573ef319d5bb","sha512":"cb68ad438a4caafcc5fb01ec8e2d858e6fe7be670509a9807cee4635a79f871bd12bff539596ea453afa679e5cc4952e9c73079ea2736dc52470613917fb4aef","ssdeep":"192:AU4Mjr/BvFk1mXde2Z/Utz9AExr7T1wWGh7YRMvFYipQj26:Aw5i14cvih7YR6FYCAD","tlshash":"dd7203e441c110eba279c64c64c0edb6b318c9d7ce223efde1dd452dc2eb69401b76a5","first_seen":"2025-08-12T11:53:51.000947Z","last_seen":"2026-06-01T10:33:03.429919Z","times_seen":44,"resource_available":false,"data":null}},"time_used":5062,"timings":{"blocked":2381,"dns":1779,"connect":279,"send":0,"wait":288,"receive":0,"ssl":330},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/index/getAppsUrl.html?device=android\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:00.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=android\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nCookie: sticket=RObFkySmtPVEZsTlR; route=ac3a5dd70d711e3044f5a1cf2fe56e38\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 11:42:00 GMT\r\nout-line: gb-cdn-823\r\nset-cookie: route=616a9e5db4809cfe7baed9c5732eb4e2; Path=/\r\nsub-sys: msite\r\nuuid: 01600-01-00000000-17726245200d6a\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1140,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"6d5fc0ec001f4f6eb22ebf8dcfe7d2ed","sha1":"0b1c514482e2ef72830e4343d53c1b76d37a7a18","sha256":"62fae126afc93367606d3481f9d913695404907a6c37adc71ebfff3556ca453f","sha512":"3880100aca862ba2cc3e0a726845ab84296534fe9d0cdafd30832bc0913ed9ee2bc0cbadd2778e7b2ac7f967b85dcb4fd3106a0af280f75966f12d10179d9657","ssdeep":"","tlshash":"5121a7ba399c6fe446c25f8cacaf0a052c391881ca12a422bed1247007cc129459395a","first_seen":"2026-03-04T11:42:39.591008Z","last_seen":"2026-03-04T11:45:46.415538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-brown01.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1beff\"\r\nDate: Tue, 03 Feb 2026 09:42:51 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:51 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4139\r\nContent-Length: 86899\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5349416342138500198\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114431,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"13705bb454fa93a337d360fde95d32ed","sha1":"f17931976273af97665c359e14c5d7b673ded90b","sha256":"221a4adff18935e8dd8d421dd0dfb431bab972377ff4ead01e00cdc9dbf73127","sha512":"fc3c18262e7afc15b4716e6ed6869f20c27749dc181e010736e5314d0cc96d33826337eb3198e8425dbf01766d7c7cd2d85ce3cf594c4509106540464dda76a7","ssdeep":"3072:d1tyThaOfU3ozO51gip4i02XfacJ7TznFNnOOa:d1tyT8cUM5hcRnFVW","tlshash":"20b312a0dce07db423bb950ca3bc9f186243145f03a6269321b3f5430d627a4a6fd772","first_seen":"2025-09-18T16:22:49.418873Z","last_seen":"2026-04-17T04:44:35.216553Z","times_seen":1726,"resource_available":false,"data":null}},"time_used":1465,"timings":{"blocked":1143,"dns":0,"connect":0,"send":0,"wait":318,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/images/nav/logo_hg.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/images/nav/logo_hg.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-a3a\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 608\r\nContent-Length: 2058\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8587388952734212151\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2618,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"135cfa25e9c949e9c61ee95fc46fa98a","sha1":"1bb31878ef45ec0651dc7bb2597193a211f95d0c","sha256":"07d3dd0dbb05e4f6122ba49a50595574acd957eea88071be4b51739d83d4f389","sha512":"57f8456fd7a7e122b46cd20e6d64bf319cf19e8568b7140f33e826f544d0e18c7f3f81c4deaed3d8c0b3bd2a507d95c1f538545f066f339af412d22985ded290","ssdeep":"","tlshash":"b3515b2eaa0ff988076f129afe60472e2e8934315563166c8cd0d4417ced7e2e128655","first_seen":"2025-08-12T11:53:50.936542Z","last_seen":"2026-06-01T10:33:03.353798Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1898,"timings":{"blocked":1576,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/favicon/favicon_1600.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1600.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 04 Mar 2026 11:42:03 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nServer: SLT-MID\r\nContent-Length: 150\r\nX-NWS-LOG-UUID: 17689632690388026171\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss, Cache Miss\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":150,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-06-07T07:32:20.043451Z","times_seen":36060,"resource_available":true,"data":null}},"time_used":2126,"timings":{"blocked":1695,"dns":0,"connect":0,"send":0,"wait":428,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/top_bg.jpg.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/top_bg.jpg.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-430f\"\r\nDate: Tue, 03 Feb 2026 10:12:55 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:55 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 600\r\nContent-Length: 7963\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 704766955003691404\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17167,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"65018bc4052ab9f9da4b8893db671cd9","sha1":"f7f3345063ca4579ddbad395223932c61306b958","sha256":"d5d87f8bde9f98ef476e5d7806e3e0771c88b6e0cb5d8eeef62b32d17065522a","sha512":"5c9ace83d42491f72092c7899e74edba9dc633b603e2906fac55d4296f8defd8dde3fc2c712276983073ff0c02ca53f043224f0cdba71ed2195d39b73bd66ce7","ssdeep":"192:FPo2FZil6umnY1JYGn4faDEuFDS/2tQJnKoekXm3UG+WnQSImdY5YPbD64PLUQLb:FPFniaGn4CD75SeSssm3U+QSrOODAG","tlshash":"cd7238772d977d0e0b764aa6eace65e21c3e7f831218c824b5993dd800e1317dad887d","first_seen":"2025-08-12T11:53:50.923231Z","last_seen":"2026-06-01T10:33:03.340288Z","times_seen":43,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 27 Aug 2024 03:30:00 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66cd4838-6caf\"\r\nDate: Tue, 03 Mar 2026 09:06:13 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 09:06:13 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 3030\r\nContent-Length: 7746\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6092690824498457628\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27823,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27668)","md5":"9c41709c2b64126b909c101a27f39153","sha1":"4ab666b36c092577acb41390ad90e96d5fea7711","sha256":"c1963697eeafb63b6c29e95da2d38d91dd907ab656e130e6e1c34d1dcd149f60","sha512":"f235dccead15199e58495c6faee849c50252b9beed29a04ae46a7a9bdbccfd569a8ab452e7fcf923b7048dfda0c3d7bd51261874642d40e994d1640ca89e330e","ssdeep":"768:u4ygd0iB6d9zYDO5qYT8fwTW3Jny+XiKZNtrt2tG:NB0iB6d9zYDO5qYTMwTW3Jny+jrP","tlshash":"e6c2b7093585102f4ecf30fbb897524f72ba95a45019a069b5fca4d1bef9f8530a6f38","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.548057Z","times_seen":17428,"resource_available":true,"data":null}},"time_used":3663,"timings":{"blocked":3343,"dns":0,"connect":0,"send":0,"wait":319,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/plugin/js/slick.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:56.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/plugin/js/slick.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 07 Jun 2022 09:15:43 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"629f173f-11b66\"\r\nDate: Wed, 04 Mar 2026 04:41:04 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 04:41:04 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4138\r\nContent-Length: 14226\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7916707008803357301\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72550,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"eaa32e5e396e8e88633fd45961f40a8f","sha1":"f4f58193c71b828dd428299c0b5133869ae3968d","sha256":"5d1146be699f8d29c94c321dbba7f310d545d6d04a8356d076d0fee69fea400f","sha512":"558aa5e86d835a03bfa13e2b5d75a01f55066e7567b26fb74494e12913f8f13bc7249aea278cba78c6c71899291b03b156306759493b80af2eec058e1d32b29b","ssdeep":"1536:/nX7Gu/1mIWhjfeeEisS7bQQk+Z47U4o029Qd:/nX71mIWhjfeeEisS7bQQBZ477d","tlshash":"0a63fe0b55e5131284a731b96bdfc028b3ba91279504ed9cbccc4385afd45288ffabe4","first_seen":"2025-08-12T11:53:50.978396Z","last_seen":"2026-06-01T10:33:03.406207Z","times_seen":45,"resource_available":true,"data":null}},"time_used":3860,"timings":{"blocked":3592,"dns":0,"connect":0,"send":0,"wait":262,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/theme/default/layer.css?v=3.1.0","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:59.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/theme/default/layer.css?v=3.1.0 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 03 Sep 2021 08:10:10 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6131d862-48e4\"\r\nDate: Tue, 10 Feb 2026 00:39:09 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 13 Feb 2026 00:39:09 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 1570\r\nContent-Length: 3111\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7847111192452968691\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18660,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5cf9259b7dd27aacd46161ec23d261cf","sha1":"ba0c399616a5ae9cdd8aec5b76ba4aae4822367c","sha256":"7f73a66b3a9a38576d124b6243a8984d795028e3493b8fa3f688d8dbe10cbccc","sha512":"834ae73090b76f7dad48a5efa850a0009d5104cfcab402b7c343ceb49410584c3a60a4eea800d366f380dc8364f5f00e3d38101c379fd5fa19f9492781d9ada1","ssdeep":"192:99OUf4PBsPIOpyNYpyBVpkgdpkqg60yQG0yrGlwSlyDXLIXiYHIli5aT6XeFTfb1:C4CyFP/FgkFxUE6QS","tlshash":"b7821de599a31584751b8214dbee267232f85c83e40fcc6cf7df354f4f086a592a1a4b","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.53514Z","times_seen":17714,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/partner/partner-hongtu-goldGradient.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-goldGradient.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1e5af\"\r\nDate: Tue, 03 Feb 2026 09:42:51 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:51 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 1572\r\nContent-Length: 94483\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12056652887206854551\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":124335,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ce2a68b63bdc53b665753c51c725aa67","sha1":"bf0e7f53993078efbf6fd58e0086140aa483bd0b","sha256":"1746360cb57da17f40d53702373975c6a089bdbc3b30ad614a2aee3861e6ee69","sha512":"ce5aee0c48488099c795f67dc7f68f03fdd4554a66b03ef5c259f5b7d8edaa69a2d142a898468a54e9e4795e5fea843ff5e926a06d4233b26d2561ca6efb5468","ssdeep":"3072:SlBd9XIEDaQchMCJ1v1kKAr1p7IQWvMsy:Sh9XRNcGCJtuNrv7e3y","tlshash":"f5c312445f984f9af1eee8465005ed5cbc509192efef6df027d3f4a78888c818396b29","first_seen":"2025-09-06T20:06:14.226062Z","last_seen":"2026-04-17T08:59:04.359738Z","times_seen":1771,"resource_available":false,"data":null}},"time_used":1280,"timings":{"blocked":920,"dns":0,"connect":0,"send":0,"wait":323,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/mobile-api/v5/origin/loginSwitchCheck.html","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET /mobile-api/v5/origin/loginSwitchCheck.html HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nCookie: sticket=RObFkySmtPVEZsTlR; route=616a9e5db4809cfe7baed9c5732eb4e2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 11:42:01 GMT\r\nout-line: gb-cdn-823\r\nset-cookie: route=169b5c290b6963ddbef067cfad367b83; Path=/\r\nsub-sys: mobile\r\nuuid: 01600-01-00000000-1772624521ba33\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"1452cebf3e2bb129b06762f43f09e5c8","sha1":"0ec65f1e79233e8c59f76c55fb89ac8637cfb070","sha256":"99a31cd18b8ce37d3725d0a77d5e314452d2906ed2b54b8b19d4de849d1bf13d","sha512":"758e5238156c2ffef164019c0090d96ae3567b56cdb9180b179f9f20dbefa3d184a9b0776e96d10667ecc0bef04ebccad0959b1eecbf5526077c096e22cfe919","ssdeep":"","tlshash":"b6c08c49f00458abce02239456d828402fec189270c9eccddc0c4a58f2cb4dfe322c2b","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.558795Z","times_seen":15814,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/fserver/files/gb/1600/carousel/10444/1715837222607.jpg.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:04.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1600/carousel/10444/1715837222607.jpg.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 16 May 2024 05:27:02 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66459926-80261\"\r\nDate: Tue, 03 Feb 2026 10:12:48 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 10:12:48 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 605\r\nContent-Length: 395940\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5920202383177274169\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":524897,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b3e194cf78370926ba1aaee2c7005bce","sha1":"611fe3ba11b26aeb0ec3a308a6597e9f22e08c7f","sha256":"2cac33463f765bf1c85b7257d18aa66c1d246252601863dae90283f41f6ab245","sha512":"ff76810bee7868fca726851df5a5c5d081febadebafa432170990a6a3d724f073caecc11beaa7fe7ead0c94fb99737519070e640ec6c671cba9789450614ae58","ssdeep":"12288:uehmPyJaQRYver667m+0o/I+6SACBAkv9+l:uehEwavvHIm+D6SdAaW","tlshash":"35b423a0eb6a1e1c19a5d239b0fdbe1e2fbb5fa1d10d64eb805459c3288f327051fc46","first_seen":"2025-08-12T11:53:50.997674Z","last_seen":"2026-06-01T10:33:03.405228Z","times_seen":42,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/images/nav/logo_hg.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:05.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/images/nav/logo_hg.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-a3a\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 610\r\nContent-Length: 2058\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2229701651101129134\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2618,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"135cfa25e9c949e9c61ee95fc46fa98a","sha1":"1bb31878ef45ec0651dc7bb2597193a211f95d0c","sha256":"07d3dd0dbb05e4f6122ba49a50595574acd957eea88071be4b51739d83d4f389","sha512":"57f8456fd7a7e122b46cd20e6d64bf319cf19e8568b7140f33e826f544d0e18c7f3f81c4deaed3d8c0b3bd2a507d95c1f538545f066f339af412d22985ded290","ssdeep":"","tlshash":"b3515b2eaa0ff988076f129afe60472e2e8934315563166c8cd0d4417ced7e2e128655","first_seen":"2025-08-12T11:53:50.936542Z","last_seen":"2026-06-01T10:33:03.353798Z","times_seen":43,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/gui-ued.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:56.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/gui-ued.min.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-e60a\"\r\nDate: Tue, 03 Feb 2026 10:12:37 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:37 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4139\r\nContent-Length: 15093\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17074480261990369011\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58890,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10889)","md5":"eb7cec35bd446183907e792eaae4a5f9","sha1":"73e3145ed299615912ffba2a4a78561ede9bc219","sha256":"3cfb4eacc2e1979b0802a6d4ff00c1b0ab7a0cb48fbe7885eeae50054823ea6d","sha512":"3f8ff6ed8137c26fb06282cb4a8b7a19602749d3904d84565b2821d9030bd872ae7c9a6157c841bf528c3851fe57095c39ea6aab7df46a5a614484e7af25f866","ssdeep":"768:yonflKVlvREcS38lHMYqrRO/5IS3oFaJX+mQdudqD9jAXImsUh8H3yALdODRG4eJ:yoflKVlvREcY2Hn0PszIfoALkMEY16fY","tlshash":"0543b70a72b130a106efb1b6515f460d323a6927d44ac46c797c9ae43f74e28316bf7e","first_seen":"2023-07-17T06:53:27Z","last_seen":"2026-06-06T23:55:15.796571Z","times_seen":101,"resource_available":true,"data":null}},"time_used":3850,"timings":{"blocked":3526,"dns":0,"connect":0,"send":0,"wait":315,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/fserver/files/gb/1600/carousel/10443/1715837130318.jpg.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:04.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1600/carousel/10443/1715837130318.jpg.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 16 May 2024 05:25:30 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"664598ca-98d8d\"\r\nDate: Tue, 03 Feb 2026 10:12:49 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 10:12:49 GMT\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 604\r\nContent-Length: 472450\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14133609150022581635\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":626061,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d4479ca09ab39740047458a0065fa33a","sha1":"7291ceeec4bd6f18016dc00756cc4df098d3de18","sha256":"90cff92a693998d460456f96e7cafcc122e39531b44dd0deed3143f5316f44a2","sha512":"c7fcb1c281ad8bd04fada35e92e1f9df3fcfcaeae82d217fdebbefa63ec99ab9b173a77a3a943b741bc5b430123f9dfd952d704e5ec0d966d7b6e7d75daedb31","ssdeep":"12288:zp8VLqfJV1eOL4RSVH113PvvnOYmB+yfiz7GzRtLD+:98VLqfJV1eOkSN1BvWlBpfy7GzRY","tlshash":"8ad42324bba94afe0e0dd338f166ba3f1fa12de8c08f62b9c55821d9516e7544553cf0","first_seen":"2025-08-12T11:53:51.00396Z","last_seen":"2026-06-01T10:33:03.345721Z","times_seen":42,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/themes/images/layer-dialog/gui-layer-close-bg.png","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:05.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/images/layer-dialog/gui-layer-close-bg.png HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://huf5as.pham.xin/ftl/commonPage/themes/gui-layer.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nEtag: \"5d848f4f-529\"\r\nDate: Tue, 03 Feb 2026 10:12:54 GMT\r\nContent-Type: image/png\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:54 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13964\r\nContent-Length: 1321\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17783151138886568032\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced","md5":"a2e938202c0287b9c82461a6fd94dee9","sha1":"b5e2adc7cb07c18a70a88af314e56b946ec1a1b6","sha256":"df9ce20db277ad8302c704a73aff5024683a0d38aff0d3e7e884a67a24439936","sha512":"2c035017e6ef6d6be24cf26972434ff7b16760ac6f5418d83652e745007a117cb79f4f9fa542cf4098b9141d4851f748c5151cb1055ea2b1f42eb70eb72a809f","ssdeep":"","tlshash":"1321830eea4368009648bdc114f3a457f7165f80acd8e2f46e8aac5d2d103f96abd6d7","first_seen":"2023-04-30T20:28:22Z","last_seen":"2026-06-07T07:30:11.522472Z","times_seen":16458,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv/","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T11:41:53.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wvv-6339.cv\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://wvv-6339.cv:8989/\r\ncontent-length: 60\r\ndate: Wed, 04 Mar 2026 11:41:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":597443,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T13:09:49.815178Z","times_seen":16212590,"resource_available":true,"data":null}},"time_used":1846,"timings":{"blocked":812,"dns":371,"connect":217,"send":0,"wait":217,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:59.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery-1.11.3.min.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-176d4\"\r\nDate: Tue, 03 Feb 2026 09:42:45 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:45 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 33545\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4676035623085759437\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-06-07T07:30:11.536389Z","times_seen":18326,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/style/bootstrap-dialog.min.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/style/bootstrap-dialog.min.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 09 Dec 2021 03:51:43 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"61b17d4f-8a6\"\r\nDate: Sun, 01 Mar 2026 22:42:12 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 04 Mar 2026 22:42:12 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13962\r\nContent-Length: 590\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 18226730105292831719\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2214,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2214), with no line terminators","md5":"d872d34b209a1227ab9edac4f649c929","sha1":"1e31517ad287eaf2915a78b3c8699c54de977553","sha256":"e403d11ca92089796e19a37183f7472b963ff2a732146b3d1eea7106183c986c","sha512":"3fdd339ea933d1b0a42c4f4685758830d5059fe0d8ef75a8dd63bb272716abf381547b9829f3958719851a8875d4a4d644bbfbe2782c816f2a6105367336b3b6","ssdeep":"","tlshash":"26415c1d0b9f009ae06b09da71fe6e1164947b61d4a1479e63ef336d8b8309735b7312","first_seen":"2023-08-14T06:23:20Z","last_seen":"2026-06-01T10:33:03.398078Z","times_seen":47,"resource_available":false,"data":null}},"time_used":5195,"timings":{"blocked":2387,"dns":1777,"connect":302,"send":0,"wait":407,"receive":1,"ssl":318},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wvv-6339.cv:8989/commonPage/lan/i18n.js?t=1772624515.471","fqdn":"wvv-6339.cv","domain":"wvv-6339.cv","tld":"cv"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wvv-6339.cv","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 17:23:16 GMT","end":"Fri, 10 Apr 2026 17:23:15 GMT"},"fingerprint":{"sha1":"44:07:68:8D:6A:AB:1A:7C:5D:D8:AD:75:D8:84:A4:33:29:62:71:9C","sha256":"43:EC:4E:FF:17:E6:1A:D5:22:B7:82:6E:45:77:D5:C5:D3:DD:D3:E8:5B:F0:82:23:B0:6D:54:11:90:E9:6B:77"}}},"request":{"raw":"GET /commonPage/lan/i18n.js?t=1772624515.471 HTTP/1.1\r\nHost: wvv-6339.cv:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 11:41:56 GMT\r\nout-line: gb-cdn-823\r\nuuid: 01600-01-00000000-1772624516d914\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 815\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1310,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1217)","md5":"9b3d572fa82d5c485b806605d1d7457a","sha1":"b802d75b882539588ec590c3637401d1109705eb","sha256":"a71d3048b61aa7a4a35a5a9f983d3b6c679f0090c23b908d6dad58c2f639430d","sha512":"20fbdba0d190084a769fc528f247b0190d50872ed1f10a1c936ac5c5c288381c1e4779943ed2dab1622c4b12881b609fbd5c6614ba1a153a8425fbe31d348f0f","ssdeep":"","tlshash":"6a21c158f3e151e3295e4ba3ed663f6b117509bd00973507837831ce11797a79c6c408","first_seen":"2026-03-04T11:42:39.659194Z","last_seen":"2026-03-04T11:42:39.659194Z","times_seen":1,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"wvv-6339.cv","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/js/websocket/CometMarathon.js","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/CometMarathon.js HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 21 Apr 2022 04:30:12 GMT\r\nEtag: \"6260ddd4-2f13\"\r\nDate: Wed, 04 Feb 2026 05:33:33 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding, Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Feb 2026 05:33:33 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 12051\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13198004972079031891\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12051,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"466a7ed7d00986d45375c0cbffb5233c","sha1":"68845ead668e9abd29c24b491dbf97b219226c08","sha256":"7ddafae5a0a552d2d56101cdc8306403e8fb9570759d66c48b25893b409f0123","sha512":"752801557c12ee7830f1f2e55352ab9c033aff01ff79abdffaee1601c54cdfc85a2041facfc5a7e180706812be5ad08668eada116544197fd2a784bac1903ea0","ssdeep":"192:0Pf+0Sn4NyRSTTPhvygOdWuTdC3d7QPXLHOm8cSCl1Ej3m7YAPzhsoqFncJ0j:0Pf+fnwfcXSaGLj","tlshash":"9e32314b6cf75085592b32b50f9f24447239d8572605e81c7dccaae48f98b6c0b6bfb8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.567524Z","times_seen":17451,"resource_available":true,"data":null}},"time_used":3240,"timings":{"blocked":2968,"dns":0,"connect":0,"send":0,"wait":271,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/vendor.4f844090.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:00.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/vendor.4f844090.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 09:07:33 GMT\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\netag: W/\"694264e2-26906\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e140d2da7966a710ba00bef37e36e352.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: kmpXRq6VoILsoOWQqzpIPdQdjMlrhhaqR-ow3n81xMQGmPVweyuCkQ==\r\nage: 9266\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157958,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65419)","md5":"1550da77b83ea7f92fa72c28654b0b07","sha1":"bdf997b0f858feb25fe28e9aedb9ac9ab199f143","sha256":"eb4f74cbc5b25824f7f0bb24042143a6495404ce6d2316886ff2c5887e52c020","sha512":"0d4ec259e0a05aa51ad1d12030c8eb7a40bfb5dfb74c2285389d0461e1dc640ddf4b77d58628f9a1cd9a92ed9d764bd90dfb1fafb85235a2c270906ce606fc2e","ssdeep":"3072:JlPm6jZ+uUcYoazxkXfDirssXrs1zFzToZpGYPfKX9dT3ZFUxxk57AT6m/FA:mzuv+pIzMvD6UFA","tlshash":"32f31bca32957c5552aa31e2887f090ef33a1d66348cd068f6a5f5d23cb540e9277f78","first_seen":"2025-12-19T03:52:38.075217Z","last_seen":"2026-03-19T23:48:50.690511Z","times_seen":399,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/partner/partner-hongtu-gold.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-gold.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1ab45\"\r\nDate: Tue, 03 Feb 2026 09:42:54 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:54 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 8598\r\nContent-Length: 83011\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1240093935295334188\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":109381,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1f1a5a7aa13ee13ebd33338b3b1b0680","sha1":"92a135287652a3582477b8fbe0420847ad4a8c6a","sha256":"1d794bb495091aa98a44b50f428eae59185a9b9c55feec3045ebcb5ec1de796f","sha512":"1d4021f01cda849ef9c12b7f9edccd441892aa8e3bd1a5bc165e88c561c24291191aeb1a3a205214505c1399012d07581bfabf4803d9509da45db81f0e101a61","ssdeep":"3072:vutRp5cNyBLZQC/brFWegWNnv7LztzwcpG1cTeJrB6:mBiNyBJ9We1R7LhD6cm6","tlshash":"eeb312117f655c20f47443b424ebfa34a4ac4cf7d854a8a287a4b1dedf88fa0955193b","first_seen":"2025-09-18T16:22:49.442313Z","last_seen":"2026-04-17T04:44:35.22244Z","times_seen":1728,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":219,"dns":0,"connect":0,"send":0,"wait":261,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/sports_promo_03.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/sports_promo_03.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-817\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 607\r\nContent-Length: 1529\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8865813485767709721\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2071,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8ebf4071e899f3b5c475b6cf66dfdd3f","sha1":"9e57ac60dc66a45d06d3f533800496bd46147527","sha256":"11def66bf0be7f177d936c967c8461675b17134fc6e890bd1a84362549f7bcc0","sha512":"fd9b6e68f2d0a5ab0f309d0f4a86381b83d74ee396f9d5a7fc9f4a8bbb2e043c6e9d07cf5aa8270b56b1e6a49a4163b35379f9b53626df0a43e581b29b88c777","ssdeep":"","tlshash":"7641f82823f832665d1e1919fb8d54dcaf4c51686c012e7abe4c2e5792f2e4c12cc6cf","first_seen":"2025-08-12T11:53:50.935656Z","last_seen":"2026-06-01T10:33:03.435026Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1708,"timings":{"blocked":1437,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/vendor.4f844090.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/vendor.4f844090.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 09:07:33 GMT\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\netag: W/\"694264e2-26906\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e140d2da7966a710ba00bef37e36e352.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: m-dWLGDnSJFyJnPa1_PYH0KsF1LLhJh5RMOcHRxJtYL6f082SZcRrg==\r\nage: 9272\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":157958,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65419)","md5":"1550da77b83ea7f92fa72c28654b0b07","sha1":"bdf997b0f858feb25fe28e9aedb9ac9ab199f143","sha256":"eb4f74cbc5b25824f7f0bb24042143a6495404ce6d2316886ff2c5887e52c020","sha512":"0d4ec259e0a05aa51ad1d12030c8eb7a40bfb5dfb74c2285389d0461e1dc640ddf4b77d58628f9a1cd9a92ed9d764bd90dfb1fafb85235a2c270906ce606fc2e","ssdeep":"3072:JlPm6jZ+uUcYoazxkXfDirssXrs1zFzToZpGYPfKX9dT3ZFUxxk57AT6m/FA:mzuv+pIzMvD6UFA","tlshash":"32f31bca32957c5552aa31e2887f090ef33a1d66348cd068f6a5f5d23cb540e9277f78","first_seen":"2025-12-19T03:52:38.075217Z","last_seen":"2026-03-19T23:48:50.690511Z","times_seen":399,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/index-mobile.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/index-mobile.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-f7781\"\r\nDate: Tue, 03 Feb 2026 11:36:14 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 11:36:14 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 11766\r\nContent-Length: 770666\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11878398745184690069\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1013633,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"20c27dd9e856b65684f7b81553d2f1c9","sha1":"043949a3d49fc7c07b1200a10790f1eea058d777","sha256":"f93e828d578d4df793a763fce99ed9ffebdb0048e16e97b97f1237093dff427e","sha512":"45f610314c165f1c23a085dec4a1de7477a8153fbc79296d0879117294f97aaab619f024cd64ca8b611fb10276f873f40f144ff9b2023e92c21dfed8a13b2e52","ssdeep":"24576:Qlg93pMMNnHVghN89z2+o3vKVEp5H/QqZ5:Q8RhVgM9zu3v6IoE5","tlshash":"7025335a698c0f7f05cb1a39922a2a740ff2475684d8f1cb53a53723c795dd48abbc32","first_seen":"2025-08-12T11:53:50.967822Z","last_seen":"2026-06-01T10:33:03.410488Z","times_seen":43,"resource_available":false,"data":null}},"time_used":851,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":263,"receive":349,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/style/slick.css","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:41:55.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/style/slick.css HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 07 Jun 2022 09:15:43 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"629f173f-6f0\"\r\nDate: Mon, 16 Feb 2026 07:24:33 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 19 Feb 2026 07:24:33 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 13962\r\nContent-Length: 567\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9420940472118679802\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-06-07T08:20:47.136058Z","times_seen":65661,"resource_available":false,"data":null}},"time_used":2907,"timings":{"blocked":2640,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/sports-promox.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/sports-promox.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nEtag: \"6670e802-3e9\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 607\r\nContent-Length: 1001\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6464790164463071894\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1001,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5d0ec89951e16b55fdd97b73758d0c20","sha1":"4bb054aa3d77a03112da3b63ff6619d6405048ba","sha256":"38bac81adbf64cc4044ec4c19fa30c8ab9531091a4779d4099c1b17a7595be6f","sha512":"ab6153495d3aef65ba68457faa47f121fa90031876662c7ab03b219eec24fdac6da5e104b08579f33d46587f9420a6d701ad806765deb6277e4bdeb46e801988","ssdeep":"","tlshash":"1b11566bb894c809c7f6584c905d6069cda3b6c57e36e910654d85b090dbf1418452cc","first_seen":"2025-08-12T11:53:50.986346Z","last_seen":"2026-06-01T10:33:03.407215Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1703,"timings":{"blocked":1440,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/partner/partner-hongtu-blueGrey.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-blueGrey.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-19f49\"\r\nDate: Tue, 03 Feb 2026 09:42:51 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:51 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 5087\r\nContent-Length: 80698\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13905343168549643584\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106313,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"37075466e8ede9937505a62ba591f77c","sha1":"46052e5f69ce3e53d15108e272c2a76dbfd02217","sha256":"3ff5df0b6596fa59aeeedd78fa1586a1ecd3749e70cd3e294c20888bca51851d","sha512":"ec78c9a7b8c0c6a83178da914e6dbf5fec3d6ed3dac5519385845a9b23d21027af90d0cd86ed2a3f337effcf09fbac31baaabe48696d0746e3e919342f7828e1","ssdeep":"1536:WWW522aOYO4kezvJYez8ZJ073qeCzSyqmxHW6iP2nPjm:WWW522dYnkeO08ZJ09eSHmx2TPOPjm","tlshash":"1da312581fb326ed956e424c4df9e5f1d42e60c291e2a2050fa0a3e2fc3c04785e6ee7","first_seen":"2025-09-05T06:26:06.67207Z","last_seen":"2026-04-17T04:44:35.189692Z","times_seen":1747,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":261,"dns":0,"connect":0,"send":0,"wait":315,"receive":351,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/index-mobile.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/index-mobile.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-f7781\"\r\nDate: Tue, 03 Feb 2026 11:36:14 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 11:36:14 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 11766\r\nContent-Length: 770666\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11318968906534895155\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1013633,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"20c27dd9e856b65684f7b81553d2f1c9","sha1":"043949a3d49fc7c07b1200a10790f1eea058d777","sha256":"f93e828d578d4df793a763fce99ed9ffebdb0048e16e97b97f1237093dff427e","sha512":"45f610314c165f1c23a085dec4a1de7477a8153fbc79296d0879117294f97aaab619f024cd64ca8b611fb10276f873f40f144ff9b2023e92c21dfed8a13b2e52","ssdeep":"24576:Qlg93pMMNnHVghN89z2+o3vKVEp5H/QqZ5:Q8RhVgM9zu3v6IoE5","tlshash":"7025335a698c0f7f05cb1a39922a2a740ff2475684d8f1cb53a53723c795dd48abbc32","first_seen":"2025-08-12T11:53:50.967822Z","last_seen":"2026-06-01T10:33:03.410488Z","times_seen":43,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":284,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x746p7mo.hygutsf8.com/visitor.ashx?siteId=65003016","fqdn":"x746p7mo.hygutsf8.com","domain":"hygutsf8.com","tld":"com"},"ip":{"addr":"13.248.188.234","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:07.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.m1nkk57l.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F9:FD:D6:B8:4E:0B:44:8E:28:48:75:D1:8B:6E:74:A7:DC:BD:45:E3","sha256":"C9:1A:1F:97:F8:66:C4:1B:A7:BE:A9:A0:C0:09:8A:63:66:A3:DC:F1:FF:69:58:2A:3F:DB:01:53:B9:B0:71:B7"}}},"request":{"raw":"POST /visitor.ashx?siteId=65003016 HTTP/1.1\r\nHost: x746p7mo.hygutsf8.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1223\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 11:42:08 GMT\r\ncontent-type: text/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://wvv-6339.cv:8989\r\ncontent-encoding: br\r\nset-cookie: visitorGuid_65003016=180b925d-deec-4f51-bfb5-eb6ede6a22fc; expires=Tue, 05 Jul 3025 11:42:08 GMT; path=/; secure; samesite=none\r\nvary: Accept-Encoding\r\narrserver: chatserver2\r\np3p: CP=\"CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: default-src 'self'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1347,"size_decoded":0,"mime_type":"text/json","magic":"JSON text data","md5":"c75227941901912be22d81df1c7755ce","sha1":"633abe81bb32312b7caf41fb46b5fc6f8fab5af7","sha256":"0be36a37759999cbdfd1ea75d3026ec7a96241d13749a152cb51b51925a3b2fa","sha512":"48572d7982cbd5ebd26f452b5c7182ee603564aafa70280e74516458f0d711cd7752f6d76936b2c6e6c009da8dcce8cb8300db35e9c74150a8a88a35dada6968","ssdeep":"","tlshash":"282175120126cc3fc547164a58a3f923891ab0b3f1c02924f68dc67da19e495b106b4f","first_seen":"2026-03-04T11:42:39.673917Z","last_seen":"2026-03-04T11:42:39.673917Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1473,"timings":{"blocked":630,"dns":1,"connect":1,"send":0,"wait":213,"receive":0,"ssl":625},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/livechat.ashx?siteId=65003016","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:00.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /livechat.ashx?siteId=65003016 HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/x-javascript; charset=utf-8\r\ndate: Tue, 03 Mar 2026 12:40:52 GMT\r\nserver: Kestrel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e140d2da7966a710ba00bef37e36e352.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: QjlgsPXjyXhdexwkq_dl87IRVliuRKtWKNnfI00fcAXHSdA4_P2z1Q==\r\nage: 82868\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]}],"data":{"size":2620,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1084)","md5":"a355ceb5fd387d8921f011041433f1e8","sha1":"dce8d6e18580c17e0ae867be77d3c9811956b349","sha256":"0dc202ddafcbb551f1b5f3e8d65c5b7bf57363cdf73317e005a30d374fd80fd5","sha512":"a3d5d8b7e96faba89a354dfeb84107aa115354e25104b3738fcafd57fc15c55eeb5efd9c06ea07c959e8605cea17a5030c621800552e05de9a31f5956f2efcea","ssdeep":"","tlshash":"535174e6676e01100b3020a95d7b738c98bc91593e488ca6ecbd522035f1f9f9655ee9","first_seen":"2026-03-03T22:05:42.231887Z","last_seen":"2026-03-04T12:00:40.503767Z","times_seen":16,"resource_available":true,"data":null}},"time_used":1067,"timings":{"blocked":524,"dns":95,"connect":9,"send":0,"wait":17,"receive":0,"ssl":419},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/commonPage/images/partner/partner-hongtu-purple-02.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"221.204.15.51","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-purple-02.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"68b69275-1b32b\"\r\nDate: Tue, 03 Feb 2026 09:42:55 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:55 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4140\r\nContent-Length: 84586\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17035085228448432877\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":111403,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d043d074c686f48dfca9d02ba3e7b670","sha1":"a5fd625703018e34f86c2b4f2f487ce5beaa0903","sha256":"f06a3aa1663a356ff269f6d89768597db1834ac6cb5ab01832786de25d7f1531","sha512":"60202e2a8ab8f0a733d26c38f479c634bffe0fe89253d4aa8f6c91eba694b4c7d331d778926803cc5c65dc678e0125aa9fae04bf66dca45dbe214bb50d537db0","ssdeep":"3072:boG85QSt1cl/lHGqN5+0Ra0h3tGgWUdL3krWqM:sP5p1AV/fRaIAUdrkrWD","tlshash":"16b31240e7a0fda58dd09f4b8a673a795f3c072eb753f0ac94836170837aa9e1257748","first_seen":"2025-09-07T00:50:47.7251Z","last_seen":"2026-04-17T08:59:04.369621Z","times_seen":1763,"resource_available":false,"data":null}},"time_used":1313,"timings":{"blocked":1028,"dns":0,"connect":0,"send":0,"wait":282,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huf5as.pham.xin/ftl/ued1600_02/themes/images/app_btn_active.png.base64","fqdn":"huf5as.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.93.211.158","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:01.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/ued1600_02/themes/images/app_btn_active.png.base64 HTTP/1.1\r\nHost: huf5as.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jun 2024 01:50:58 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6670e802-b46\"\r\nDate: Tue, 03 Feb 2026 10:12:42 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:12:42 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 608\r\nContent-Length: 2261\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8402992026124559821\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2886,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"3e344854bd877cb471358ee38a1d8b4c","sha1":"b29f6629a2cb8eaae3d622f404e5dd36184a9ee0","sha256":"0c4a159f128fb5b7579a280bd9eb9233f9f3509a82da93d78c1696b740ae4ae6","sha512":"cd42b3ae699e8207a375c45c6cfd08a5b6250dec8a87b21340b45dc5f72ff3632aab4894bbc0027e36619df1bccfd4c4eb09fc03af0ecddc7af995c870dd56d2","ssdeep":"","tlshash":"77516d3c8a0b50385e9411e5db24d510daf5b0618728e23173d894cf4705ff115a6c5e","first_seen":"2025-08-12T11:53:50.926302Z","last_seen":"2026-06-01T10:33:03.369271Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2229,"timings":{"blocked":1892,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2o9o7qal.3j1ai0ll.com/visitorside/js/common.032d44c1.js","fqdn":"2o9o7qal.3j1ai0ll.com","domain":"3j1ai0ll.com","tld":"com"},"ip":{"addr":"65.9.46.84","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wvv-6339.cv:8989/","date":"2026-03-04T11:42:06.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jwtr6rwb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:95:E0:94:BD:E2:23:21:E6:12:6E:B7:39:37:C0:E9:EE:B6:4A:DB","sha256":"BB:AC:26:02:5A:DE:BC:FD:AB:C7:25:9C:97:E6:59:D5:4C:28:CD:0D:DE:30:E2:CE:71:FA:DD:A4:97:49:02:62"}}},"request":{"raw":"GET /visitorside/js/common.032d44c1.js HTTP/1.1\r\nHost: 2o9o7qal.3j1ai0ll.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wvv-6339.cv:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wvv-6339.cv:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx/1.22.1\r\nlast-modified: Wed, 17 Dec 2025 08:08:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\ndate: Wed, 04 Mar 2026 07:51:23 GMT\r\netag: W/\"694264e2-1b420\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e140d2da7966a710ba00bef37e36e352.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: Pkguf7M3tXviZNQL_uAu1Aesv5kK3fwUoapN_3QqfAO7x1PBt8NJ2g==\r\nage: 13843\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111648,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61590)","md5":"4d90fe732a8918235001f90a280ee3fd","sha1":"7e16f5554ebea2306f378b175c18457aed09bc22","sha256":"35d46a2ae61a964d46b8d668fa0d32e3cdb9e975f848692ebc12916b32078e5b","sha512":"0600dab872d39f5e780664b3c654b854568548399779eb614e286d39cc74030f40c63703c08161e995f45aba2aa8c9413a64b7938d81cb20eebe1dd84c8a98d6","ssdeep":"1536:9QARRaYYKZIknaW+lwfZA/AHJQZ1WpbuRIRoxkpV48KbnmrbB2L:93ZIkaWAw7KbqbB+","tlshash":"b2b33afb73c5b2f44143eb64e41b6410b42e3cbe7f9587d48255cee4b9b0099898ee98","first_seen":"2025-12-19T03:52:38.055006Z","last_seen":"2026-03-19T23:48:50.675664Z","times_seen":399,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}