{"report_id":"b67bbdc2-94c1-4350-abcc-5c1ad3d19feb","version":6,"status":"done","tags":["bet365","gambling","phishing"],"date":"2026-03-04T17:58:14Z","url":{"schema":"https","addr":"jixiangfang.app","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"title":"吉祥坊","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T17:57:23.859173Z","times_seen":17821759,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"jixiangfang.app","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T17:58:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]},"summary":[{"fqdn":"trxo9lz3ts.025cm4i1.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-03-26","domain_rank":2570545,"first_seen":"2025-06-15T03:56:21.752558Z","last_seen":"2025-06-15T03:56:21.752558Z","alert_count":0,"request_count":4,"received_data":0,"sent_data":1780,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jixiangfang.app","ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-04T17:58:18.182886Z","last_seen":"2026-03-04T17:58:18.182886Z","alert_count":9,"request_count":38,"received_data":2460024,"sent_data":22976,"comment":"","tags":null,"fingerprints":[{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"o1tyg6.pham.xin","ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"domain_registered":"2022-10-09","domain_rank":0,"first_seen":"2026-02-20T07:31:35.78692Z","last_seen":"2026-02-20T07:31:35.78692Z","alert_count":12,"request_count":91,"received_data":5666442,"sent_data":45995,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"37f0336a6fe3f56c661b149ecf659efe","sha1":"9aff4163d5da3b8d760f0593c583dd8d1f6dfc14","sha256":"f33f7afadc5c318efdd57d35da2dc2aebe39fd166a61905ce37b9f7363f51c2f","sha512":"d24a42f5f1834957e5616b5f61d52db98c3351e5ab3346f1fee8e7ca6ba62dc7c51f4ae645a8dd403194e2df3f8d2ea2c3b34d371a67dde201979552033cbace","ssdeep":"","tlshash":"279004510f71113ddc305157055c13747050c13ddc1ffcd43413d57c04741300011401","size":48,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-06-07T07:30:11.575592Z","times_seen":16886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9750d9e7084d16026fc64f53c96baf76","sha1":"bbd915c01d7ccaaf23f8a075ee3bbc7fcdfbcca5","sha256":"79e55f8e77723d9154f74c2e94cb91b6557c9f949a3e95fb33c09f7a4146fd2f","sha512":"13486fe10fdd613d2e4583e4493f8aa09c703ad21d1c35664d6a9f7d47fbdd5acf73214dfed66a624108156cebff2114ee594f13345a4366fb4c0d8c69416e65","ssdeep":"48:9iSbBeaiKWikXIJiXZi3WWiDoi+yhivWiF/iKGikXs9iX+i3vWiDYi+fhivtikXD:39Db2kTQDm923fU23Q23O23R23Q2fO","tlshash":"9be1a3b12896b0e34314807c59be3b050e6e4f56791960e5b2bf13c8abf4e8f5963dd8","size":7225,"data":"","first_seen":"2024-07-04T06:53:07Z","last_seen":"2026-05-31T23:24:43.722211Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2dfe7db95be9792922530c88ef88da4","sha1":"fc992fc77fdfa4abe3570569fbdc53a1c5714c0c","sha256":"d05ab645a69476e9a8ba932b58907e3d8f103bf23aedafbe3e76b27f4a22358a","sha512":"99065782830b3e3f013910fd9aa795fd6b341e7892eaec200ad05305920552798f2446dad45dd254de8185095f36af246cee24052b58f05eb17dee20d59b5abe","ssdeep":"","tlshash":"7f210e524f048a9b77cdc7195060241c6ccca06fbc94b988f6ce9ba70f5ea9e56fd083","size":1279,"data":"","first_seen":"2025-10-03T11:28:12.468736Z","last_seen":"2026-03-15T12:05:04.391268Z","times_seen":1669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/layer.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb96339625e9d456e32f86cdb3c7a7a1","sha1":"1301165c58bbb13c542cba493b7ab5774e87e31f","sha256":"17fb047ba6828fcbdf2ca226fa4594cfded2b2fdfeaff89a5bd81c7cf0359919","sha512":"53083bf4d6d450b1e9402c3f3dc40fb3434a27d47fbabee51f4ce1d3577f2a0aabe90cf5f6dfc22830a3878ec7552a6bf6bff605c82a4f832c79f34f7657ccef","ssdeep":"384:r1dCih92A3DgrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:r1YiV3D+WtXItqF13k8","tlshash":"6aa2b76a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":21994,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.284506Z","times_seen":17853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/websocket/CometMarathon.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"466a7ed7d00986d45375c0cbffb5233c","sha1":"68845ead668e9abd29c24b491dbf97b219226c08","sha256":"7ddafae5a0a552d2d56101cdc8306403e8fb9570759d66c48b25893b409f0123","sha512":"752801557c12ee7830f1f2e55352ab9c033aff01ff79abdffaee1601c54cdfc85a2041facfc5a7e180706812be5ad08668eada116544197fd2a784bac1903ea0","ssdeep":"192:0Pf+0Sn4NyRSTTPhvygOdWuTdC3d7QPXLHOm8cSCl1Ej3m7YAPzhsoqFncJ0j:0Pf+fnwfcXSaGLj","tlshash":"9e32314b6cf75085592b32b50f9f24447239d8572605e81c7dccaae48f98b6c0b6bfb8","size":11905,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.280528Z","times_seen":17751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3db5f0d4e2254cbc0195e7007c366cde","sha1":"01229630d25ccaa283129e864f4d5fa13f8a1992","sha256":"287e1eb4f788103baaa3c0789087a9f54df44b3d656220e6049f09f99f61f7df","sha512":"bb7bd21c4804834fbf545974bf78ec7bf8f576daac292760c3b277ed894d47ccc8c069216e3c5ad2298ff152e896b5df49b8b03025734cda7eb9cd0458091fdb","ssdeep":"","tlshash":"590199218d394090bc4013a0276f7b0db922463b5dc2e644b21e5b617fea8af028a7de","size":704,"data":"","first_seen":"2026-03-04T17:58:29.196295Z","last_seen":"2026-03-04T19:51:58.949965Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c41709c2b64126b909c101a27f39153","sha1":"4ab666b36c092577acb41390ad90e96d5fea7711","sha256":"c1963697eeafb63b6c29e95da2d38d91dd907ab656e130e6e1c34d1dcd149f60","sha512":"f235dccead15199e58495c6faee849c50252b9beed29a04ae46a7a9bdbccfd569a8ab452e7fcf923b7048dfda0c3d7bd51261874642d40e994d1640ca89e330e","ssdeep":"768:u4ygd0iB6d9zYDO5qYT8fwTW3Jny+XiKZNtrt2tG:NB0iB6d9zYDO5qYTMwTW3Jny+jrP","tlshash":"e6c2b7093585102f4ecf30fbb897524f72ba95a45019a069b5fca4d1bef9f8530a6f38","size":27822,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.285255Z","times_seen":17838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2dfe7db95be9792922530c88ef88da4","sha1":"fc992fc77fdfa4abe3570569fbdc53a1c5714c0c","sha256":"d05ab645a69476e9a8ba932b58907e3d8f103bf23aedafbe3e76b27f4a22358a","sha512":"99065782830b3e3f013910fd9aa795fd6b341e7892eaec200ad05305920552798f2446dad45dd254de8185095f36af246cee24052b58f05eb17dee20d59b5abe","ssdeep":"","tlshash":"7f210e524f048a9b77cdc7195060241c6ccca06fbc94b988f6ce9ba70f5ea9e56fd083","size":1279,"data":"","first_seen":"2025-10-03T11:28:12.468736Z","last_seen":"2026-03-15T12:05:04.391268Z","times_seen":1669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","size":32679,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.26862Z","times_seen":18163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2b449ebf66a97575eaff6b48cc67b20","sha1":"efbad36ee6bbfd690803f4956f919b42b44b1978","sha256":"0c24985288ba14f0d1552dd1c359a5d482b309c5051eeeca5de129e1e1b90136","sha512":"8e49e60b1b22603e454ce1d9f6409ffd3ca260ee5d48fd1db56695242c71615d71f31bf8885a7b8d48b6bda7af7081e7c59a16aeb3ff28985dc4b1bf9b2878e3","ssdeep":"384:2F05MtGUz1x9JLZS5At1KBZdHCl3PEkdn69oz1R0f6Iem:2KytGUbtMQgBLIF6e1A6Iem","tlshash":"9792938564ea0075a6cbe16c5a9f4c98773c809b4b894d0f7c8e66b4df64a7003bb5fc","size":19333,"data":"","first_seen":"2026-03-04T17:58:29.197383Z","last_seen":"2026-03-04T19:51:58.950564Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"0f59de2ff4651bdfd7ac8cffb9b29173","sha1":"8bfa2cb30f1a46ba41e985fc07c45b8eef3e5595","sha256":"a8c7c3fcf6336c4dbab301d4858a71e3516750fba39641e0594da9e761c4a6fe","sha512":"a7127671cc92de6bd6294dc14bad524ac82d1b8d1aac81f6ea246eb100a4cafcbda7d663c1cbc7b989f84101736b40ac3f421977da14e3d2279c5df557444788","ssdeep":"192:sukECtXXeQmtyzgoclg8CIhVJboN3rU2rxMkS0GGSpXG/NHaD3QWpM8hNgNdjszl:UEOogh0+fy","tlshash":"2252a0c5abad703b2aa3f08c453a55153137c81156542e54fdbcabec2ba2f8cd2953f8","size":13649,"data":"","first_seen":"2026-03-04T17:58:29.198893Z","last_seen":"2026-05-26T19:37:50.034826Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/moment.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"36c8f828395a9395549bd6e7307cb7e9","sha1":"f30a4961558e2d3d4405e7d93aa28fdb63245e78","sha256":"5d5e32fa1e06a0bc9396f349d142ad248e82086543e438c890e43f41e692db33","sha512":"40c24a9011e1bbdd98bd95b341c400bdaf48fefd953fcb407368fe3c685ac09196b55e230c03ca9890c35fe9acef2c916bed52423dc1a7b532a1db9817c03a8e","ssdeep":"1536:qOL1yBkBeb9wNoHpH7tjl2Ulwjwaj2BH3fMobEKeYEoZYiMirUw0:qOCWeH70R2BkobE+cw0","tlshash":"aeb35f5a59e31023496362294fdf2011ba388123590dee487d8da3d49f9ed7c47bafec","size":117433,"data":"","first_seen":"2023-07-29T10:21:40Z","last_seen":"2026-08-09T23:49:55.278406Z","times_seen":17896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab8b1bcffc72e505e0f37f693d6a87a5","sha1":"849c792d84445ff1cc946c4458255dce152a68da","sha256":"36e8c37b1055713547aa080372b86615e1f9858d3f632cb0f949e05247f8e607","sha512":"cb717ce8dccbd48d7b8ac79f8018ff327637fce9ef4441b832a9ba7af57cfae5e476170ec2490374e8026a0b6a6a265399d4ad2801ebdb37b7a0092d8f9331a3","ssdeep":"192:1BDi+KreB5FlJ7KRn8rVavN3nryOcCxiAcJGw/d2mi7yn:TTKCBRhKRn6YEDdV","tlshash":"ec42c8a821fe392301d371394f1e6a072532599bc396ad013e5e8b884fe977c46b36c7","size":12737,"data":"","first_seen":"2024-06-28T11:39:26Z","last_seen":"2026-06-07T07:30:11.579799Z","times_seen":12672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"6681856885ee92601b7711c11d19553f","sha1":"95ab4437869df8c790cad28e0753a4c9ea362e73","sha256":"ce52fd46b2a5cfd741a2f0c39bc2d5218271b5690bdf8ec33af94f1062e98d23","sha512":"5f2a2fe1e899778e0687301ff306fd8c35b869c0675f726653be98393da31fedc388b4d3ed25d7075a0da69656458fc929bb00daf92e1381e19bb49764bea4b5","ssdeep":"192:dvbLsKRfG3Ncq2w30CowkzcDC/L04alCUM:d93d3","tlshash":"1722cb08f1bb1da540b3203c1faff082ae64564b9d89cd02bc4d59c45f09aede971f9a","size":10725,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.580464Z","times_seen":17284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/websocket/Comet.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"1008fe6a5e1a182d7775963b85405bb2","sha1":"e174a7b08cc3cb5545af1cd33d2814e604119392","sha256":"7479f6f22194ac37dd6d3f5a579b4682ac8dcb6389fb961cf4140f3fcc707a20","sha512":"26e07821ee1e8e94c4bada028e049df7572cac06f2e8dae958baa7a011eb201a6a1d4ed0cfa15017a3f52a0cb949343de0b33ca6da7c245f763c86d5adfb0223","ssdeep":"192:4Pf+aTbLSru4NyRs8VDv1KygOdWuTyVC3d7QPXLHOm8cSCl1Ej7bY8l7YJIJvO5N:4Pf+aTbe4M2cXzsjDUfj","tlshash":"ab721e4a2cf76086552732b90f5f64543235a8172605e91c7dcca6e08f98b7c1babff8","size":17162,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.27003Z","times_seen":17668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/idangerous.swiper.min.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f15409fb02c527ce1f66a2fd3c4aa0e9","sha1":"1e1e1bcc0f49e99e14ba34991cffe0745178d302","sha256":"1a1b5d3d6fbfc28abe37a668abd59494208c63c5f0b5d040cf4bbbd137f87c27","sha512":"66a384d6ad5fba862e778e24c43326a718328b6f860469fb5eb69c2687b0bbdc3c2dfa9049b0e3d5509214db1dbec4477f5c3654dc04446a505379a4300d4908","ssdeep":"768:oTFZ8CkWyYzh9MTvl7prcAgQW5ppZ+rPPWRqKDyBuq0t:cZiY9uTJuAgQW5LZ+rPPWRLt","tlshash":"5613f8c1b32031a741f3626e91fecb4271f54966aa05d4dcb5ed84c41ab489a03beff9","size":45187,"data":"","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-08-09T23:49:55.276199Z","times_seen":17521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/message_zh_CN.js?v=1772438913332","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f122062201cd2cedac9761f4c46b2a3","sha1":"5bced4febcad095851dd9d0dc4438d8e96aa8715","sha256":"96e43037ced41b7e8dfe16f604a02f6093aa1b65e9f349ea697e486e29bcd814","sha512":"b9cfd2e598fe9a778bea162e5180ca88bf01d2c02cceaeb27304e827fd0814662733d0df3ed07e2f3d5d0c34fea3f0e25b277d75fdc1a4de20c41eb169d225c0","ssdeep":"384:vTrBmS53qEviCysRI/2aTvfyxtvgfG+S7MjRBQP1RODaP5YnRn21IRBGN9Jaqxk7:IIy92nyfB+vODR01IRBG3JpfsIU","tlshash":"38e23ba604bedffb581615d6d44700c921d96b895afc7928bed0ee1e1b863c604f3387","size":32151,"data":"","first_seen":"2026-01-15T08:15:21.591485Z","last_seen":"2026-08-09T23:49:55.267427Z","times_seen":7700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d15a9b513acdcf3e9b08901384511565","sha1":"f1fe72392137895e4952f835c0330f76aacfecdf","sha256":"9fa644edfd9af9be6b244016e8f4f0eaee414732edc6ba3641e8647253359995","sha512":"9bb3e57667fd095c42db5514ac18c9b41baf50b81ded3ff810486ce394e1034751a941fefdb4e0e09bb98613b5dfc0a842d37cd9802671928e5f49380b9eda29","ssdeep":"","tlshash":"b071013cf4fa2228282b6085779b2821a5915427144dfd0cbb1ff3389fe9d25ee566c7","size":3647,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.581264Z","times_seen":17277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"30a92affe53b746123a6227fa3de7af6","sha1":"fb13d33cafa96735bed508420e3d05ad6d192013","sha256":"3dc34e4ad51c1a83fabc1f4b1302b68ec01e904194b6e3b477cb8ecf3d627565","sha512":"74e5c59d87aec58df4d63e05b834d1ace02e623e3c6cc3e3072e267caa1f3451c3e10554729b98763c6675ad7128087bccfe009775f55d8e121d9a616519ac83","ssdeep":"384:tJLZS5At1Kt+GhcqJmYcIyaFIy/BIyv3IyPlpK:btMQgt+GW5IXIaIqIYpK","tlshash":"49a2951824fa406819a372785befa0c8f578801b8449ce05bc9e93586fd4a6877f77fd","size":21772,"data":"","first_seen":"2026-03-04T17:58:29.204822Z","last_seen":"2026-03-04T19:51:58.952774Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f5bce1aa50f72fd0834901c70db4f43","sha1":"41771079bee5eb45539e694a5eff580732ab26b0","sha256":"a50724b65a2657f6e67adbf98a3dd135de52b4786350f0b1bd142adff38c7ffd","sha512":"d1445eef1431e8e11779bb3aa9da243cfc04ea0abe4cb9a62b6b0f5940a9ea17ad7d0926a51925feb06ce2afc435ce9050c3955ce973407eebfa4dd1d0ca35af","ssdeep":"192:cyzyMkzf77qsBQXbhG1SUnqpT7H8DvswVAJ4jy7j3vU4P8eaoCrHoQcasI4kHwCW:mMkjq0TqEVAJ184P4DiQzR0KmgqQ2N","tlshash":"599210b876f701b24c667477875a2144e100f0ebb648ee087d4e56dc4fa8a34b3a6fd5","size":19701,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.582699Z","times_seen":17251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"edaddb8132e9e0880252c5b6c47bf1c1","sha1":"dc08b5b6ca432b46cca94f1f297491e1b08736ea","sha256":"b98809417c0240085bf70f2a1127f0b622c1514651737e7e4ffac4b39e4da17e","sha512":"00dbcc0a7b89e5e377bc26573fa3b9f1d09267044b3ee1c594e22522f8a17733bf041ebfa09ddb2e70a9f495437933f8a4e42875a16a3221067bf1df558c090b","ssdeep":"","tlshash":"da4000000000000000000000000000000000000300000000300000000f000000000000","size":6,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-02T23:52:51.581804Z","times_seen":20359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f1681b5a72417b33c2869aab85af152","sha1":"b40a6d9c6d058c2bd6e126a1b0191182926b9d04","sha256":"eabdfd0c5237f406e0acbef879968e72e5e3d62dd8e8b6bcee48e5ab7f4d0154","sha512":"d9190153595e85b071dbf1c92212e7c30a5de2e1d6c4533558bb5f4235d6227c327751799ce20fa50a875a4ceb25227f4eb7d133c3257d8770c1131117d8bda4","ssdeep":"","tlshash":"1631d8d2f3cd01fd42099504248620d9b11dc2394219d48efa9d3c8e73d696e232f32f","size":1761,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.584253Z","times_seen":17228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c3f7d9e5de3b764c32a679ad06ae3db","sha1":"9ab260e36b46c6ca6f58066ee914f3826d86a37f","sha256":"fefe9a763127c0f92edfe95be1000aeed2eda7690482769c90dc9488dbe5d33a","sha512":"1517bde6929159474692270e256f6021611365d30618b57d1fd325e7170bc7540bac8500e1ccd438d2a3d5f3b6cf1456ba39560d5cbc685f4b56b4c2b4126ad3","ssdeep":"","tlshash":"0e51462618e8c076a31b639d0b9f1141b53c750bc3ac8d357d0d5b758fe451452dabdd","size":2561,"data":"","first_seen":"2023-11-23T15:36:17Z","last_seen":"2026-06-07T07:30:11.584941Z","times_seen":15235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e76ce6b2de6004a5edd1c1057a916015","sha1":"8060c65906dc76d7146d9c48a3ee61bddf50d00f","sha256":"0820cfee6d5186efad01ee2b6d0f357b7eae8a1b780cdd9ace169684d4bdbffe","sha512":"1d7ce6312deffd5c9e5e2fb00fb51b13a94c9aa13131202ceef08976e0f644e297ef166a3885636bfc42955dce7149e1c03e15b6e6831cced35b2dd2bb631be6","ssdeep":"768:cOHmhEOPRtPvJdcz4nPQCKJV+3/svMIR0K73gYeLLvcOvBea/u+IaAVbaa1aTKOB:xhLq2jIIa4aTuUwlo8/z0vwr90AIC8","tlshash":"5ac3c71c75e712a664b330791baf31007072941b690ddd08bd5dbac0bf9862da3b6bed","size":128494,"data":"","first_seen":"2026-03-04T17:58:29.208664Z","last_seen":"2026-03-04T19:51:58.955993Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"479c01001c455527cf2aafec087accad","sha1":"230c5d853a00977d890c25cb56b5a07c5e0acd0e","sha256":"0ad2a7081ff475ce3a2068fe69547248166c0fd39f26fbf03f2ac5db073a16cf","sha512":"ebedabe18db451b91ae6cfe4a55712d0401a1cd5545a5b9344edcbb68c7cb678a1a8a6efc20f101d99e8cc094a060bb32deccf9e694a837ee17a8f8585bd43c6","ssdeep":"","tlshash":"1f21233e1c17a1b52ef7046a9b7bd5a63af2051b2442e400bc8cd8193f14fc11c25bde","size":1389,"data":"","first_seen":"2023-08-21T11:10:45Z","last_seen":"2026-06-07T07:30:11.586469Z","times_seen":16887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"7932637ac9b0a1125acfaeffa837b6af","sha1":"01107a42cef642f68e70ef30502ecb6c0de6a0d6","sha256":"f938651bd7efeb3c523dcca3df1c9a0cc63b12f604816c8e49636fda5b1b1c7e","sha512":"6ee9dd22796803d3a44aaf8a59219dc077e2cf7ebe2b58efe545c7f08028496e595fbea31d2990cc0f210054f6cd91055326484acd544aa29889712c2c050f57","ssdeep":"","tlshash":"bc71315e7559bc949bd3202a4a7f1008727b486f2928c850fa5dcc50af5cf0f2362b9f","size":3486,"data":"","first_seen":"2023-10-24T11:42:08Z","last_seen":"2026-06-07T07:30:11.58824Z","times_seen":15967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd4934ec50598a49950c57836d268ba9","sha1":"9830d9f40b0baf411ea1e7b7a4b65675cf35ae04","sha256":"89e8ae92a48e530a676704a7858edcc65fdd1488e39280ba8da4cb80dc5729d5","sha512":"1b7e75147ff199dc7900be58df3ab41039a70322ab2db2d697238b166447a915cefafb3e1cc17377a7ecfc08b641fd9ab51351f060abb405ceed36ee1e5b1b9c","ssdeep":"","tlshash":"c641df0d25ee1008d01729a9fbbbf50c632994272ca4ed08b50dd2154f6ed7ed2b9a9f","size":2036,"data":"","first_seen":"2023-11-22T16:18:01Z","last_seen":"2026-06-07T07:30:11.5897Z","times_seen":15182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f5aa58ba615dcae4a93dbe4d384735e","sha1":"e4111c65fac68a168a7982b2bf7fc0e832595e1c","sha256":"7e22de64db5b8312757736be49a4b4fcaba22197233f07de765f6281c198fa54","sha512":"a933b3ce593b9571d8b3cdbd19e699b79cf260da4043c9eb4c007ac75f6d79bd57d1f0f0fb5fc26c447225497aa7710cadcced664ea1c4d505aecbb49bdaf2f9","ssdeep":"","tlshash":"f6019966298a4414d344241499b3b704a2edb85d88c018affa5ae6f96980bbeb85ddcc","size":685,"data":"","first_seen":"2025-06-15T03:56:46.535219Z","last_seen":"2026-03-04T19:51:58.958766Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/countUp/countUp.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e9a58a52dd5597d17699c8d25c2841a","sha1":"26e032f2abad781cce71814bd6d43138db8f89be","sha256":"b14b3f362ef456b8ef3d9525e5fb6f88f04135a39551edeb88d840e220d012bd","sha512":"6e9cdf308f82ea204e7a97404532d4dfef4b6f1d7c4810d9cdd279112afabb1f982196691718306e21a72b5cb1aef66fc71d0f0546944942ae77b56adc7978e1","ssdeep":"192:a3+jBTUNKveiCoWsyItBF2qb2VAgCy9HLqNx:a3EEKpUo","tlshash":"ebe1db8a55b312212a137a6b9b8b33432a3f8633241dd8a97c7e13811f9542247d6ff8","size":7140,"data":"","first_seen":"2023-03-07T12:39:28Z","last_seen":"2026-08-09T18:46:10.42681Z","times_seen":2143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f5aa58ba615dcae4a93dbe4d384735e","sha1":"e4111c65fac68a168a7982b2bf7fc0e832595e1c","sha256":"7e22de64db5b8312757736be49a4b4fcaba22197233f07de765f6281c198fa54","sha512":"a933b3ce593b9571d8b3cdbd19e699b79cf260da4043c9eb4c007ac75f6d79bd57d1f0f0fb5fc26c447225497aa7710cadcced664ea1c4d505aecbb49bdaf2f9","ssdeep":"","tlshash":"f6019966298a4414d344241499b3b704a2edb85d88c018affa5ae6f96980bbeb85ddcc","size":685,"data":"","first_seen":"2025-06-15T03:56:46.535219Z","last_seen":"2026-03-04T19:51:58.958766Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/jquery/jquery.mailAutoComplete-4.0.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"08e5a86e482c2cacb81fefc656248104","sha1":"80a09e4000e7a2305498ce1a99b8f52991cf2e1a","sha256":"b976748094d2676273e388bc3632321d9c8e44e191a0cb69c87779a933ee1650","sha512":"0a592cd1b909bf4aebd2cad4c4556fc4460aa6ed0aec0fc642374dafeb9924929d80e167d1f45d9e5dd93210af8de69840665963bc71e2f0b3a261b970b7a5f2","ssdeep":"96:ZaN1VI9nylyy+B6hAnlA4xmsKVwH1Dsejz:ZAzCnyl+BpFmstH1Z","tlshash":"c88122a0f35c91f7059e7213654e5acd91be40bb5c1529afbca05a0c38f8daa232dc7d","size":4142,"data":"","first_seen":"2023-05-18T23:52:16Z","last_seen":"2026-05-28T12:49:52.674633Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1880ce6f7e86a563b54412066416edc","sha1":"379f66a5c76c995e8255b0f825f2d2ef05d3ab74","sha256":"dadb28dfc6a383dc589a4c01a6db796fab7be6c40b7f7d413a189394ecac0bf1","sha512":"c5764f5080dc814bc985f6c4b26e18684cfe09bd3bb2dadb92e45500f82f583561e31d4b722d43628a014f5bb0c4f97019f91dbf0432d38909e7468e86e2bc49","ssdeep":"","tlshash":"70312f221117907787f2fb12a27f2406c80f878a953c99ee739f9070bb014fd71aaa4d","size":1827,"data":"","first_seen":"2024-07-12T23:08:52Z","last_seen":"2026-06-07T07:30:11.591126Z","times_seen":12357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/countUp/countUp.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e9a58a52dd5597d17699c8d25c2841a","sha1":"26e032f2abad781cce71814bd6d43138db8f89be","sha256":"b14b3f362ef456b8ef3d9525e5fb6f88f04135a39551edeb88d840e220d012bd","sha512":"6e9cdf308f82ea204e7a97404532d4dfef4b6f1d7c4810d9cdd279112afabb1f982196691718306e21a72b5cb1aef66fc71d0f0546944942ae77b56adc7978e1","ssdeep":"192:a3+jBTUNKveiCoWsyItBF2qb2VAgCy9HLqNx:a3EEKpUo","tlshash":"ebe1db8a55b312212a137a6b9b8b33432a3f8633241dd8a97c7e13811f9542247d6ff8","size":7140,"data":"","first_seen":"2023-03-07T12:39:28Z","last_seen":"2026-08-09T18:46:10.42681Z","times_seen":2143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6ea297058f6d52d83390d9ea7f914aa","sha1":"349df987c3c4c50687d993b31f83cfea7f796730","sha256":"2f21ca2376a9112f70c12ecc46d75ff792b067f5edceae5ea06011c13cf14e56","sha512":"80999dd48f3db744a7cc59dc9cec9303b35216f65d2711891705dbc5dcfb34a18c5c015a2615573aaf59315882c5724ab5dc0e218e8f9cfa2579c4ef37d81cc5","ssdeep":"96:Ge2n8LmEhLzcRXKBxap3cSubfC7WjnM9LidafQa+X9MhsvVQCi:D2n8LmEhAXKfapMSu7C7w2WX988QCi","tlshash":"e0c10e4e72e120b199a7a52c929f901024725403080fdd1dbe4d93a4df89d7fb6ba3ef","size":6025,"data":"","first_seen":"2023-08-02T04:42:13Z","last_seen":"2026-06-07T07:30:11.592514Z","times_seen":17147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/plugin/js/zcircleMove.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf3197be7474657b55be9a8ad315e69","sha1":"2cf2927d57466082eadf68225f3720ba184456ee","sha256":"e10e9de27d5b1f3c55345f40aeae25623a3f3744d2adcbd744fa2bef63e77c60","sha512":"42a9f6990ba0c9cf571a282d26d23d0329f1fd23b050a4f9add5b722fd3787e922b937283a803dc774dc6d4d94d2fa68f8e2020e03291839ce29a5891ad765bf","ssdeep":"96:VB+Qw6eqI8DwZN+BSZv4+VxXqUUL9ALAH2EXg+kGBOk2Qr:VB+0stJVxXqUUhA8H1g+keOk2Qr","tlshash":"60b18c385877158abd631a89576f71087296f1038203d936761ed3981ff811a91ef3fd","size":5441,"data":"","first_seen":"2025-01-02T07:34:08.310236Z","last_seen":"2026-03-04T19:51:58.897872Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"cf0aad09d2e7287c48d72501c4ed8cbd","sha1":"7950b8c00d5a278b662dbccd11af31398a408e51","sha256":"72512199b29d971b5fe854b1f610604dcbdec2c38666c106f1d15863e0df32db","sha512":"2c1680bded9b22be2e6c38d76e46ef67bd438c6c9d99c804f9dcb77ca30bd5aa6f090c89a51205cc7efb466040a171eaa318ffe6fdf046c924394ce7867218f7","ssdeep":"","tlshash":"75d02b4472e3280c08f22b214cde250508a271b610484d08b10ce9d64bb5522b97773c","size":278,"data":"","first_seen":"2023-04-14T20:29:13Z","last_seen":"2026-06-20T23:33:35.358813Z","times_seen":13045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95956,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-09T21:02:50.879029Z","times_seen":18423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/gui-base.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6ce47d880d7a50ddf91b074c8572edf","sha1":"6a3657c67209136e5b544859daecf16f2d153b72","sha256":"c49e04c7ecfd07c74b58cf161ef2b58f2bc837a9091ed1ae090a33734cdaa734","sha512":"0946a1cb9d048b485dadf4056a4aa7be685a8906240a828a5ac776a4e1eae2ed5ef238bd0724da41cce33324357ba44704d34a6766430f1552630f9a17b664f4","ssdeep":"768:+lkflKVlvREcS38xHmuqrRO/5IS3oFaJX+mQdudqD9jAXImsUh8H3yALdODRG4eK:6ClKVlvREcYoHz0PszIfoALkMEY16pB","tlshash":"4353c80a72b130a106efb1b6515f460d323a6927d44ac458b97c9ae43f74f28316bf7e","size":60909,"data":"","first_seen":"2023-08-26T00:19:56Z","last_seen":"2026-08-09T23:49:55.283117Z","times_seen":17106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/bootstrap-dialog.min.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ce8851dc823429a42ab6147554403cc","sha1":"28f381f0e0aa4f5d56690e65723bd97fb59a38e6","sha256":"dd1edf5e54071903c4c1e81e33636444899d645df6b18bad22249da07f91c811","sha512":"f42a4d48c666d9c78fcb6c6061141452899085c504bf15e23749611dda00b6913e75ebbe47ca436a2ed016175d0918f193e474f13974a2f6a5304e18909a87ee","ssdeep":"384:3ai3F3N3VKUINthDa7Vnq86z3JCDKSz1m0hMtkJI2Cg0WEUOv5Dq:T3l3INthDu1YCDKS5flC9m1","tlshash":"6a9261ccb2d9b54c47abe072143f200df03a996951496119bc79e9ebecf060aa077f79","size":20132,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-09T23:49:55.270728Z","times_seen":17963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/jquery/jquery.nicescroll.min.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5bc8cd626b389bde727a91e6ce79436","sha1":"3df6c39300ac286cf596b3bda273cb39ff825429","sha256":"a1eb48eeb3b3f2ba41940d3041464f0b386b7a7c4a8acb42f3017e691f4b116e","sha512":"2c1dde58ce83d9b716919dfc42602aef3022be012b3f92e61b17b674303ecbf0b9d308064b6d6c2443cf3e3dfd36bfb332eab62e64b56bef0be801e6f4610f12","ssdeep":"768:CwJl9VwAdGuMbJVAOi9ee9RjOEe1sdMv5rjITry:Cxb7AdRjOEKhHay","tlshash":"9553a7cd7522346b05de5235d18b4b4a623a9857730b90e4762c8cf46d29bbaf223f7c","size":64651,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-09T23:49:55.267996Z","times_seen":18048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"eda13ed9af5485d5d597a2ef6e924bc7","sha1":"49a0c76f8db44d69948848266460f9df5dd96be8","sha256":"e188ae3916f5793c2d29d297c7b08e77aa56efe25580231d352c58cb5f710c92","sha512":"5cf144967a8958fe53f476abd79a156abcc7c7559a559855c5b48c4050b252a363615a242f31c1509374fe45db55d92dfc9e7c063c34f18a914ca482c9c69b80","ssdeep":"","tlshash":"01f09e45d67b55a1907364a83f7f20356cee430f914cce68be2c17c25f485150bb479d","size":584,"data":"","first_seen":"2026-03-04T17:58:29.214707Z","last_seen":"2026-03-04T19:51:58.960881Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d24a27b56a588bcb83462bf72dfe16a","sha1":"5a3a122a406ad4445c3b78f44ec4c32b7a13f7a0","sha256":"56287f4aa127f4034565f096be5459fa251e64215fa4e2c3979e5b7f2399d526","sha512":"1f76fc8263164bc9f876f7e50591d96e0302f065841ffbe3218632f94e5de2bb96ae02507c69f570ff6ade45bd2ae472f516f1e7bfd5d8f1404a6e979c326c0a","ssdeep":"48:Lh9J1waQo72wlPxv13vhvh9J1tato72tlMxv16oBJIOBf1ra/TJIDF1IeoUdvDBh:LzY67b1hvzVv7y4PaPxIfaZWGi17YjM","tlshash":"3781d07a32f24881907b50b91f2e37809335588fbf3d6868be5d0ac01f2a41ac096f5f","size":4121,"data":"","first_seen":"2023-04-19T10:42:24Z","last_seen":"2026-06-06T23:54:10.570157Z","times_seen":1051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/websocket/PopUp.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"07864ad2e2759d53f8f2f14dd4295bd9","sha1":"95144219e2eb702c4c4a707c3622b086876cf41c","sha256":"871bf30791bb89605b61cea815c3786246274b65ede3b8a8b8c2dd9244cfa89d","sha512":"f469d0f23c75e918d55e076d72481fca7043ac5eff9025aaac1f26860d080e4fc3c5d28f8f9ee1dae80719aca2b83f39ea82a129c221980bd7d63c212bacc119","ssdeep":"","tlshash":"9041ae54baf359a12c9b71f3aaaf30413160f2479505ed017d0cb9945f1d228b2cf7e9","size":2088,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-09T23:49:55.281372Z","times_seen":17819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/jquery/jquery.super-marquee.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f77d83590bc0a69298f2fbcc5d9911cd","sha1":"1d6aa25d7052f53ad0181385e5efe72f224bbdb9","sha256":"1d042b9441e860ddcc01b9e9e5e8d354121ee0e31b47f6e18a321e2e633d22e7","sha512":"a39dc6c01df32c8f72842af346f4d67e1278d37a74a0541537b8274b421bcfbc547a2f4844f3c4b6c5cdda4c78f0a8f41171c87ffd149ab52526a95bc6c5bf61","ssdeep":"96:nwzrUsI9/8w/ISEgOGXFRNcrc8PQjc3Pb:+rUsk88OnJQA3D","tlshash":"2991252d7290f5d559cf3c3be02b0b050c785123a54e00927a65def279ba379a607e1f","size":4433,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-09T23:49:55.274536Z","times_seen":17916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"358a11f1a38d071eb204231b791f9643","sha1":"145046e4d7768dd69f2ad1d4f5d03ead56409289","sha256":"b0daec2f462651c96609f2c32edec2705d4bcde3bd653cdfe50c4336dd14f060","sha512":"893651b7b27bcbca426b17be1665b2d46d744c25f62c1a3e77611fd1673caf36dd60de4f7eb5a52116a47783085b8c4a22fd3b993501737ce864545845bad019","ssdeep":"192:X6grATsTXFP/T3/q5tT4PvT3/q5SW8jaHCEtRwkRSyTLxS606VxLBJcbZuYH5YeA:tbrr48jaHCEtRwkRTxS6zJGuYZ8ikTz","tlshash":"e3d19516b5e3a0f322733619df6f2000297e1487a509c444fc5e4bda0f4972aa563e9f","size":6665,"data":"","first_seen":"2025-01-02T07:34:08.503625Z","last_seen":"2026-03-04T19:51:58.962865Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/commonPage/lan/i18n.js?t=1772647070.494","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff854383e493539cb059d56622237e95","sha1":"00bc274fe2f66338284002ed07470601217c5739","sha256":"783e143f4f8c88d276978b4c9e2c7341976f0301952a5880b3782ed3ba22d6d6","sha512":"6835bcfab496eba7cb22e0a2542cf9644583aa759e578673ae4c3e7547b0db221a91377aee0c0a20ad9808971dbdd9f78490785074af460ba8bf1fa20e903243","ssdeep":"","tlshash":"b821ce68f7e462e32d6e8aa3ed663f6b11750abd00973507837831ce017dba79c6c408","size":1310,"data":"","first_seen":"2026-03-04T17:58:29.141889Z","last_seen":"2026-03-04T17:58:29.141889Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/float.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"829af863b0cdc4a603919824ae046299","sha1":"1d417b1553e4ecb7125ebf2005b74255291fbf73","sha256":"1dbe4afbc9ed220c08b9e95577b56f83e2e8e0f7620c5dc18266bb325e5bb271","sha512":"e1202fa26fd353dfb2f989d3d45512e0691c062076297399f5fe62f63e7f5b194fec4a3d7fe2f09be1a6a945e197e7d68445d33dcc6f80b23a315112d9ae5b6c","ssdeep":"96:G4SXFXVXDL+R5NxuHie/moRUgIm/Kv3RKXg+Iw3qCNv5IC80b7Yr+HpH:G7xhDL+jNxzeBVLKJ1LeqCwCxb7YspH","tlshash":"04e1506e03b1212195aff1beaf1e424c6631905b2507dd057e0c87c46fa493c4636fee","size":6959,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-09T12:20:42.489548Z","times_seen":17549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f5bce1aa50f72fd0834901c70db4f43","sha1":"41771079bee5eb45539e694a5eff580732ab26b0","sha256":"a50724b65a2657f6e67adbf98a3dd135de52b4786350f0b1bd142adff38c7ffd","sha512":"d1445eef1431e8e11779bb3aa9da243cfc04ea0abe4cb9a62b6b0f5940a9ea17ad7d0926a51925feb06ce2afc435ce9050c3955ce973407eebfa4dd1d0ca35af","ssdeep":"192:cyzyMkzf77qsBQXbhG1SUnqpT7H8DvswVAJ4jy7j3vU4P8eaoCrHoQcasI4kHwCW:mMkjq0TqEVAJ184P4DiQzR0KmgqQ2N","tlshash":"599210b876f701b24c667477875a2144e100f0ebb648ee087d4e56dc4fa8a34b3a6fd5","size":19701,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.582699Z","times_seen":17251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"edaddb8132e9e0880252c5b6c47bf1c1","sha1":"dc08b5b6ca432b46cca94f1f297491e1b08736ea","sha256":"b98809417c0240085bf70f2a1127f0b622c1514651737e7e4ffac4b39e4da17e","sha512":"00dbcc0a7b89e5e377bc26573fa3b9f1d09267044b3ee1c594e22522f8a17733bf041ebfa09ddb2e70a9f495437933f8a4e42875a16a3221067bf1df558c090b","ssdeep":"","tlshash":"da4000000000000000000000000000000000000300000000300000000f000000000000","size":6,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-02T23:52:51.581804Z","times_seen":20359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95956,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-09T21:02:50.879029Z","times_seen":18423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/lazyload.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d87854586672bff7f886a47da85da5ed","sha1":"8d0537030dc7a81ade87a41a75fd5a75e4e33da1","sha256":"17859187f895c27de8869fb6bfec579fd68c4588d0af71d08d334be92d144ada","sha512":"d8c3e724f00bcf1ebfe1f8e96dda01243cf22aef18a0fc5a25a42d84458ff58a22a316dabf1d80d1b4f4c28db79edbdf9ba19df755d72f2b0b9f64497137672f","ssdeep":"192:Cdr+EgBD7NiM7B1wV20jSCQrF/bcbe7/bgdCx4RTsmS3KDsS3CggvBSChKRJ0Suk:Cdr+JBDYpV20Ez+obgdsm3ROCJIqSJvG","tlshash":"304200483deb51aba1d3b0f89a5f11447235810b160eee253d6c9395af6093932f2ff9","size":12053,"data":"","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-08-09T23:49:55.277546Z","times_seen":17652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fe7dadf050dad2dcfd386d21b880281","sha1":"07e7feb8dc9309fe66d86d7a9e27f8efd32ab0bd","sha256":"aa891aafe8e98e1e15d81b2b116e6c3808d0bbbec56cd24818e2e7ac911877c9","sha512":"9da40e5132ece9fe346f27aa467b2496545c84197131c633e5b1ff1f641ece723440ec0289e82d7948b85bcd901b9e3eb6e36f8e0339ae05e4a32621e895accf","ssdeep":"384:yC+tJn9Dbvbf1P3QSBxDrdiewZnnoTW39if+04xSlR4nbiamdrjNfrzInGINYlor:NWJnlN3QSBxDMewZnnoTW39L0MSR4biK","tlshash":"a762954d3a9514bb4adf31b770ab204f767e8800852c91c4bdbca0d166b5ee072e7e6d","size":14857,"data":"","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-09T23:49:55.275365Z","times_seen":17908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"21af6468e526c3bd1db397ab721b7d56","sha1":"bbf52bf1347eaec065ed45b7a26065decabec462","sha256":"9d91718001a361c4b03db0c233b967c59f2586e5497a5d87a52f1516786b3155","sha512":"fbf3d64d4085ec548d932d4af79ae9e50961e92b26065887f502c5f4f5f19667e98885df9851045677bd0e78ce9c7dfa2f767c1e95455f26519cdb1ed2304f0b","ssdeep":"768:YuGaO8x6QjhvjZyZNFiEBEHvL/eyWsfxASOvmdrW//r+OHdWQXezThKRL7eWcVrK:YuGaO8x6QjhvjiihL/eybeSOudr+/rv/","tlshash":"1d13b874d77d594600b014dea82f32862068453794260d3bffa8be787ddea3a763172e","size":43555,"data":"","first_seen":"2025-01-02T07:34:08.504686Z","last_seen":"2026-03-04T19:51:58.964089Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fb5bc49b08edca26aea4d40b6aef53b","sha1":"e49aa850d4b64c0016c6d6e5082b525859917e86","sha256":"68f3c90ad1b7db02c09242a829da96fb35f042a00e4318c7cce746154e7ffa05","sha512":"1b3b32203a66fa627cb1bb25e0aa73a063c78503abf661eaed73fff7bbe044d2d25d104b44e1ceb03c3c1aca9458622c8cc94afed06ff09deab5cfb05311212b","ssdeep":"","tlshash":"215198d8d78e499e41ba63b397da10c8255ef47f0d1ed84afd8c1bd9152013921d473e","size":3065,"data":"","first_seen":"2025-01-02T07:34:08.505747Z","last_seen":"2026-03-04T19:51:58.964848Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","size":32679,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.26862Z","times_seen":18163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6152dbe786c64ef5d51a4ff5c9ef8a3","sha1":"49e74ee76a4027735bbf6449a6474c411e232745","sha256":"8216d6d70df2a557d3068e0dd57b7c2c3aa99812969a11cd2bbf7cdf87da0b25","sha512":"468de3dc160ecf1b0d79bb6673a3b704c7355201ddbc8d38d6508f1c4427e862a75ac522ee3ac8e6b8b94bfe060e8a6d9e3b7bb0359b83c7c419bb85bd77320a","ssdeep":"192:C3C3SRiyPt4u97wbep34bYyP7SCyO1RuGFYZrcbJrSr2J/CQAqHy74Dq3+:C3CiRiyPt4u9864kyP/AG","tlshash":"6e22860874f308d578b3307a4f9f218439e6561f5109c954bc5eabd48fa8ad9222fbde","size":10016,"data":"","first_seen":"2025-01-02T07:34:08.506851Z","last_seen":"2026-03-04T19:51:58.965603Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/chess_text.png?wsSecret=1d5bfe33ac7bd4d410322c82d77f5e17\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/chess_text.png?wsSecret=1d5bfe33ac7bd4d410322c82d77f5e17\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-5f75\"\r\nDate: Fri, 06 Feb 2026 07:12:00 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:12:00 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 146\r\nContent-Length: 24437\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11147898496101348351\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 539 x 740, 8-bit/color RGBA, non-interlaced","md5":"fcf52cf4623237ab6303869ba0a003d3","sha1":"a13897208cb4d60719b04c723bc7db23db87667d","sha256":"d833247750aa842986d0c95e782ef32b41501abcd6388000c45a1c388d55b1e8","sha512":"5053fd420815b3eba5f6f174e5f5637be7d958f43f0f4a90d78ea2d62f7c9560df6590a788b7fa54c4b18e87bda3573ce34eaf9fcff3a7a7c529b78f112444a0","ssdeep":"384:UensVtWeVsUUBe3lPeuszzuFiLzN8yP+1D54O+047bZHPEnRzGpMjRENoTYQqjc:9WtTsUUBClmd+wN7OD54q4fZHPERGMOA","tlshash":"40b2e16079d2e983f90a511864c7d3da79e62bdc0d78c99017ec8c6394e16bce86c68e","first_seen":"2025-01-02T07:34:08.384447Z","last_seen":"2026-03-04T19:51:58.877123Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3242,"timings":{"blocked":2928,"dns":0,"connect":0,"send":0,"wait":313,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/themes/hongbao.css","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:52.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/hongbao.css HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://o1tyg6.pham.xin/ftl/commonPage/themes/gui-base.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 30 Mar 2023 06:38:07 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64252e4f-d530\"\r\nDate: Tue, 03 Feb 2026 09:42:04 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:04 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 5666\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5660288226126964231\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54576,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (336), with LF, NEL line terminators","md5":"a212ec8d2af1172e5fe97229a8cdd470","sha1":"676b870b21e2b4f18dd23dd24baa8a30955b8362","sha256":"910aca19fa0a1df0c76607fdde36968687403343a50022bed3693011abee9fc8","sha512":"6f8ef1e9c22978fe39412ca413b132e9ae54d5b84c1b95b6f40b5c7bd44e726212ca20b731de29294e77fadf0651f3cbc8bfad1d6a4ec6b808064faa4aa3811b","ssdeep":"1536:qsgR4FlccsG7TCbzG3ArEDTgkvudNssvmp13ZUcPGZ10iS9EvlBcovGF5XAso/GQ:qiu","tlshash":"78336d05e241abab21dad174230bca3bcdd81485fea4dfb7223971f4cba55e5b03625c","first_seen":"2025-04-07T03:18:03.889172Z","last_seen":"2026-06-07T07:30:11.560478Z","times_seen":10722,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trxo9lz3ts.025cm4i1.com/livechat.ashx?siteId=5001622","fqdn":"trxo9lz3ts.025cm4i1.com","domain":"025cm4i1.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:53.955Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /livechat.ashx?siteId=5001622 HTTP/1.1\r\nHost: trxo9lz3ts.025cm4i1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T17:57:23.859173Z","times_seen":17821759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 05 Oct 2022 09:40:30 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"633d510e-7fd7\"\r\nDate: Tue, 03 Mar 2026 08:12:41 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 08:12:41 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 3\r\nContent-Length: 5207\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4252094653348298854\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (801)","md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.26862Z","times_seen":18163,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":318,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/fserver/files/gb/1272/sportTeam/1/1599878166834.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /fserver/files/gb/1272/sportTeam/1/1599878166834.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=cd06424ba4cc39d1f90c88edc27d9720; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\netag: \"6379b409-1c005\"\r\nexpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nlast-modified: Sun, 20 Nov 2022 04:58:49 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 114693\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2254 x 3000, 8-bit colormap, non-interlaced","md5":"da08a0611d7969e620a8cb738a9fb62e","sha1":"7c2020422541084613882952f9e7ba5165fae5d9","sha256":"83c611c5b6222261d0562274c9bbc8e654ab2e49c513e3f5ea644ad499c35474","sha512":"f88e4af6564b21abfd63bbc9a7ed2b4fa8fbdd84622baa4c8c0b119fff47d4ff7cbc4f293cbc87497cff580a86d387eec9276868b40bd46b08578d67527c6415","ssdeep":"3072:iv5eMeu1jMu23eMpKTFlDpWgFfXBS8wJai:fuBMhpKTzDvtw9","tlshash":"b2b302a3bae3f1b13645f189598fe460fc255f9dea025c80d02e3f02527abf27146e19","first_seen":"2023-07-26T09:02:20Z","last_seen":"2026-05-01T19:32:21.568053Z","times_seen":481,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/themes/gui-skin-default.css","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:50.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-skin-default.css HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 11 Jul 2023 08:40:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64ad1569-7b6e\"\r\nDate: Fri, 20 Feb 2026 10:19:30 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 23 Feb 2026 10:19:30 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 308\r\nContent-Length: 6253\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10121447516649336331\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31598,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7014)","md5":"1d6c464e8e5800ca483689206174ec6e","sha1":"d5ff05232c516152a711ec5c6d060a2f2cc791e3","sha256":"08d29322d883091252b3348e9514dac589896516374e8a319fd1190dd67f8e30","sha512":"4e259baddb36f5a8894c26f0f50c453200cb738c5e9d8131e146288a0d25ed3d4dd42f173392f8dbae521fd8344425b2b6e1ade92bd08edf7ab010cb577f775e","ssdeep":"384:/FboUEeh9ScJRfc0uGWw8Ms4N4muQh8v8brn8w/NtSmdz:/FbPSVGmNQjLPFtSi","tlshash":"7be29834f20022a9b563c7a570d1dd4a362de592d2170ebdf26b319c8f425ce263bb6c","first_seen":"2025-04-07T03:18:03.900415Z","last_seen":"2026-08-09T18:46:10.40678Z","times_seen":11146,"resource_available":false,"data":null}},"time_used":3368,"timings":{"blocked":1542,"dns":940,"connect":275,"send":0,"wait":277,"receive":1,"ssl":331},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/mobile-api/v5/origin/getFloat.html","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:53.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"POST /mobile-api/v5/origin/getFloat.html HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 68\r\nOrigin: https://jixiangfang.app:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"locale=zh_CN\u0026terminal=pc\u0026is_native=false\u0026version=v3055\u0026resolution=2x"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: https://jixiangfang.app:8989\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:53 GMT\r\nout-line: gb-cdn-801\r\nset-cookie: route=c7419011ef227a9b9406a6c2cd9b5007; Path=/\r\nsub-sys: mobile\r\nuuid: 01377-01-00000000-17726470733141\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 3234\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17483,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"67c06073e68a9604d89ee4bef898bb07","sha1":"42e7637ac61dbcd4e91a012f3e904912bf894520","sha256":"d1f75929a7155bbc7dc1b12656526eb1df9a06683efd337a65dad65cf24f09f8","sha512":"d27d3197a45b5a998c98f3b1f603afc300e622e8903f610e1d00f69ab0db6617c15f6bcba7cc137a68ce26271aa9fd91029d928ec55927ae17c28ef7a84807ae","ssdeep":"192:SOGQtZaTAOir6yV/w2i2a8rzx12Ygvl+jy0rGFwFbzNhD8rfKINE3:QQHp6FwFbzNkne3","tlshash":"a572fd73b315490527a6c6cc6266effa1bc427368bd2053eae134235eccd4ab1ac5f09","first_seen":"2026-03-04T17:58:29.071649Z","last_seen":"2026-03-04T19:51:58.911508Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/game_text.png?wsSecret=5d20498d4c67aff86b2a9a4027ad7a01\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/game_text.png?wsSecret=5d20498d4c67aff86b2a9a4027ad7a01\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-6cea\"\r\nDate: Fri, 06 Feb 2026 07:12:05 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:12:05 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 141\r\nContent-Length: 27882\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11335678599039936671\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27882,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 541 x 740, 8-bit/color RGBA, non-interlaced","md5":"795c0aa13ab17eb07b4bdbc87214e8a6","sha1":"89b22ba34cd55ae93d3e51c246c2fe459d3b4da7","sha256":"238ec30d9e51e290161d771ee5d02ec3a720f6fb850ac63e0c738eadce649332","sha512":"678ed4d5e9a061fa979b0f54e364c0481036cebe0a41d6467f7933b37ae0004ac46ef096c6536dc42412dfe60377228952233c5bc435610124666eb586f30970","ssdeep":"768:BRhEuBSZtsPDVus+m+Oo4J9lCKfOiU1aq+DTvBP2baVYl:BRhSUbxo62kNvllI","tlshash":"c9c2e00576ce01b691d6f64c3ef12b5a239bfbccfd816587289cdc2292d547360784e9","first_seen":"2025-01-02T07:34:08.385784Z","last_seen":"2026-03-04T19:51:58.906367Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3358,"timings":{"blocked":3105,"dns":0,"connect":0,"send":0,"wait":252,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/img_app2.png?wsSecret=258b77770b22ba0b16fc95d12cae5db6\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/img_app2.png?wsSecret=258b77770b22ba0b16fc95d12cae5db6\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-25a30\"\r\nDate: Fri, 06 Feb 2026 07:11:52 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:11:52 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 152\r\nContent-Length: 154160\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12302799707095471558\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":154160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 527, 8-bit/color RGBA, non-interlaced","md5":"8195d1a1d01e1c1bc5b5d8550d5e1163","sha1":"0567ae9ec9cdfb1ba4784c740505cfb6923e1ab0","sha256":"d5fc8f443c13a95bd3187742bac7714f02ab19c0c6878fdb4d907db40e228dea","sha512":"c842d5258afa92a70c4b124c6a6206c8b9f7bd75d66b270f2e2f08d111aa8d642399141778e243c1bd3460e8c88c7d2fbc733cde1e90784861abd88a4e2a0b14","ssdeep":"3072:WJEzzQvhzbQ2tNixT5MblrvOvSdkxfimWT2nvTHEfEGveH6+683:kEzkvhzXtP5rvOaqWT2VH6+b","tlshash":"4de3125ea8232144929faa5bfed6ed022f3708d275915497521dfa8f1c3067805ebccf","first_seen":"2025-01-02T07:34:08.396898Z","last_seen":"2026-03-04T19:51:58.943917Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2966,"timings":{"blocked":2622,"dns":0,"connect":0,"send":0,"wait":294,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/index/getAppsUrl.html?device=sportsApp\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:54.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=sportsApp\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:54 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 01377-01-00000000-1772647074b049\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 916\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1156,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"4a7a54a2be58213ca11a8dd0ef83edd1","sha1":"53a1dfac83eeec2c6c82f94a7041632e5bdbc70e","sha256":"06405a75cf6cce3e0955dc4b3de1c64f8636959852f9c08bfece09e1663bde49","sha512":"7a665d7a17f57f1580ff5a980dd86f1e3edc718658a17ed03b8cbd580b618cfffcfee8645955516f0e5ac9067cf8d4c2f7fda485258fc946693451dd9d06f489","ssdeep":"","tlshash":"f8210ac6c891a86931f161c487af55202cfd1fb0143211507fe819042cce28ef44cd71","first_seen":"2026-03-04T17:58:29.075886Z","last_seen":"2026-03-04T19:51:58.890742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/img_icon3.png?wsSecret=8b03ee79a72dbd2a057d7c1381f25699\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/img_icon3.png?wsSecret=8b03ee79a72dbd2a057d7c1381f25699\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-2563\"\r\nDate: Tue, 03 Feb 2026 12:50:14 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 12:50:14 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 151\r\nContent-Length: 9571\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13808115625928246231\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 100, 8-bit/color RGBA, non-interlaced","md5":"da2a8682e74207e3e33919bc9208c7f1","sha1":"fc7c144fb6694f2c1d77bcd4c795214e05f701f5","sha256":"35502ad4fa076fd03bef5cbef30d6dcba03ef613b86407408d512ae9ab937506","sha512":"a61ab6b4d308e51269576923e4b1e022c85a46a490045fb8429f184307a6fbe6010ef4d5d0eb9a4c19dbd1073ec33353a40e0fb0377a2b7ebd8d31bb68709688","ssdeep":"192:+SykknnyXH3fdw/YwWiHXrFtB/2t62aaNXa49BqNPUNc:henAPG/Xr7B/2TaarHc","tlshash":"1d12ae9eff66ac410384f50d1f94a637b1710b10ab47a471bae8c0572e201ea844cfd7","first_seen":"2025-01-02T07:34:08.356668Z","last_seen":"2026-03-04T19:51:58.900144Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3950,"timings":{"blocked":3658,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/part-4_promo_bg.png?wsSecret=edc1a67f4a3feacc0f90ededc690fdc8\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/part-4_promo_bg.png?wsSecret=edc1a67f4a3feacc0f90ededc690fdc8\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 17:58:00 GMT\r\nContent-Type: image/png\r\nETag: \"613c72b3-149d\"\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 17:58:00 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 5277\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16455403020471388590\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss, Cache Miss\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 165, 8-bit/color RGBA, non-interlaced","md5":"9126a3b7ea1692592d0f562472e5135a","sha1":"86acd6035f63be6553554a4df1a3b9c2463a20fd","sha256":"bb85e37a7c125bae95ca7dcecbec84aef358018cfb495813c5533e3740f1a277","sha512":"fc9cd5ab2957fa8e15e95e04c4f31a313ed76a6a34cab3036d0ed336d61f07eef5190268b8b4f443ceb3fbf8fdf6820c65067bfcdf12141f1bea236690faf5d5","ssdeep":"96:aBSJYkknmWIYJjCjE/NgHns5/yFOSJL8HImwLIrGXPioN6StbySIPvYBn4qRprY8:aBSykknn+jHUW7mb40Cby1POnrT7f/zr","tlshash":"bcb16b8afb1067651912a981c0f42c40fb3b57d172d7f2826c89581398760f6f53d6fb","first_seen":"2025-01-02T07:34:08.399436Z","last_seen":"2026-03-04T19:51:58.899113Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3844,"timings":{"blocked":3486,"dns":0,"connect":0,"send":0,"wait":357,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/index/getUserTimeZoneDate.html?t=mmccauf0","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /index/getUserTimeZoneDate.html?t=mmccauf0 HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncachettl: 3\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:57 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 01377-01-00000000-1772647077f80a\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 97\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"d5d1c4b40584642cf61616ef5f99c3c1","sha1":"44cc797076fc3e5c5d11967a135737460ce0e5af","sha256":"41e2c4d67124789a61b88e6d8de38b90bcb431df7d4cb9f378136a31a3a63fb4","sha512":"2a990e7fa725cb43f6425a64ddb4facfa2e3786bd997292f9f37faa7aaa86bf17506cc264435081cfa1aabcb48d465a7b55a3271f140e33138ef0d28570e063e","ssdeep":"","tlshash":"78b0222000f0ae0e0a2080a0c000b0cc080ab02b08c3c2a02bbacc8ca8c8e8a2808202","first_seen":"2026-03-04T17:58:29.07973Z","last_seen":"2026-03-04T17:58:29.07973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/headerInfo.html?t=mmccaulj","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /headerInfo.html?t=mmccaulj HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:57 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 01377-01-00000000-1772647077f312\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 116\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":127,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"f7bfc470d94eadd22e972123beb18f64","sha1":"820999d6dc4b38a42fef4d91dcce10372a76b84a","sha256":"061af6d928ec9604dbd97590f8d340098fdd18bfcb3229af0f2d9f4f7e860c24","sha512":"ef985885a82ae9ab9818052bb101e29757eba636f303eec7433153703028a28a99fc322d602fd5abf201c2da51df1c65133bae9faaaef0407a53abf9e0aec48e","ssdeep":"","tlshash":"67b092292a2addae98876621c29006604259041af9c6ba0ee2bc9a0931ca6eb5226517","first_seen":"2026-03-04T17:58:29.080978Z","last_seen":"2026-03-04T17:58:29.080978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/websocket/CometMarathon.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/CometMarathon.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 21 Apr 2022 04:30:12 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6260ddd4-2f13\"\r\nDate: Tue, 03 Feb 2026 09:42:05 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding, Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:05 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 1072\r\nContent-Length: 3316\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13604269295447320291\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12051,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"466a7ed7d00986d45375c0cbffb5233c","sha1":"68845ead668e9abd29c24b491dbf97b219226c08","sha256":"7ddafae5a0a552d2d56101cdc8306403e8fb9570759d66c48b25893b409f0123","sha512":"752801557c12ee7830f1f2e55352ab9c033aff01ff79abdffaee1601c54cdfc85a2041facfc5a7e180706812be5ad08668eada116544197fd2a784bac1903ea0","ssdeep":"192:0Pf+0Sn4NyRSTTPhvygOdWuTdC3d7QPXLHOm8cSCl1Ej3m7YAPzhsoqFncJ0j:0Pf+fnwfcXSaGLj","tlshash":"9e32314b6cf75085592b32b50f9f24447239d8572605e81c7dccaae48f98b6c0b6bfb8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.280528Z","times_seen":17751,"resource_available":true,"data":null}},"time_used":2225,"timings":{"blocked":1937,"dns":0,"connect":0,"send":0,"wait":287,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/fserver/files/sportTeam/football/nba02.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/nba02.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=cd06424ba4cc39d1f90c88edc27d9720; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\netag: \"5c08ffae-3e0b\"\r\nexpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nlast-modified: Thu, 06 Dec 2018 10:53:34 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 15883\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"c8b6c20643e4a904ed41e280865e36cc","sha1":"e64e3c73af701ab9b6e33b70a4d1cefda6d3395e","sha256":"bda9585b6818ae71ae01667cb0e4485645694d3b8b4e857869535bfc78fc401b","sha512":"0028e9a7182850296b3fad29829ba16cc3809ef66ebc6d98641e5ff499546f119ffeab499d10bf4b981df77b8a26b27ffd95977cf002dcb03786d66933341b1c","ssdeep":"384:m2pScKDg5/E4TLfz9J+HBeF0SHi2OMf/4aZc22D2Phhf0mnxIv:m289DgVjTLfz9J+o2Ki7MfNwiJhf0mnY","tlshash":"d062d15f48ccb7f67da27ac4e81d3cb89b8b810583d2da274d5e56345c11f9c640e39a","first_seen":"2023-07-01T21:03:10Z","last_seen":"2026-03-04T19:51:58.942465Z","times_seen":94,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/themes/gui-base.css","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:50.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-base.css HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 25 Feb 2026 06:51:20 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"699e9be8-146ad\"\r\nDate: Mon, 02 Mar 2026 11:15:46 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 05 Mar 2026 11:15:46 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 17173\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3390854559302514106\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83629,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12023)","md5":"ae436617c02061eb715fce1f6e4d84ba","sha1":"d29e23c56a6972ed8c139be8fd55022e8dc79dc2","sha256":"95be5699e27ae8ba00031ebaad84c414dbe6ab48f6445007513e072c9243eaae","sha512":"614e0041902efc437f9ef9ab63f0ee9e7d1236e0a5d811013dc75509c0669ef44b24ffefec0cf367ed241b6615b506b27a951cc17f168e7ff97f09b9564c4137","ssdeep":"1536:hh/EEJVfpLdXYSN4H1Y7B/Daf4ZxnVXCg9bI:VXYSNE+RVXW","tlshash":"0a8385b2e15824e63373c856a381fbda2554b122c5134efdf89f655c8bc738612a2f6c","first_seen":"2026-03-02T15:35:34.435383Z","last_seen":"2026-04-17T08:01:36.591141Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":3365,"timings":{"blocked":1519,"dns":940,"connect":273,"send":0,"wait":292,"receive":29,"ssl":309},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/themes/gui-layer.css","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:52.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/gui-layer.css HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://o1tyg6.pham.xin/ftl/commonPage/themes/gui-base.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 17 Aug 2023 08:10:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64ddd5e1-c760\"\r\nDate: Wed, 04 Mar 2026 12:37:16 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 12:37:16 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 1262\r\nContent-Length: 6923\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9862467848220847836\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51040,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (489)","md5":"858eefc3fa70af7d0115c901908471f5","sha1":"29c181bbbc09a424f7de7cb57629bd8a9e3c679a","sha256":"9f6a77c93f998e065f1ed52eb9943a3c560a50366bba2c8a34a4a1223c793caf","sha512":"3731234bfa0b2abf45883da0ab74960a77f167dc158f4eae4f9c58293bfe6ccf322fabdbd4100bd5fdba0f463cbf18ba44d89b0bed695b65b8edce7edc9441ec","ssdeep":"384:RCEe+wekUqKrIQycnvqP9bQmAJS0OuaIHmOKpPg+2fF93sJJ:RCf+wekUqjpqCP+OuaIHmOK6+2fFVSJ","tlshash":"67330d22a16816cd7156eac8705dbab7b7fc8c02e21717bcf8ab304fd28d5439476a47","first_seen":"2023-08-17T12:06:57Z","last_seen":"2026-08-09T18:46:10.405449Z","times_seen":16739,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/themes/fonts/gui-fonts/gui.ttf","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:53.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/fonts/gui-fonts/gui.ttf HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jixiangfang.app:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://o1tyg6.pham.xin/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 04 Sep 2025 09:10:07 GMT\r\nEtag: \"68b9576f-68cc4\"\r\nDate: Tue, 03 Feb 2026 09:42:05 GMT\r\nContent-Type: application/octet-stream\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:05 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 429252\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12162516063640777912\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":429252,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"791bc072a3e361510b60c0994a742bf3","sha1":"f08c63ea64126c0f3b24c67fd0e0c5ae5df1b08e","sha256":"7a8e26265738d3cb0f201a53fb168cd59bb721cf0407f00bf25f720cfdcd760e","sha512":"d5548476dd786b5d0d77b02d36199c32d7895e0be8084be18a682f02303971b4c85f6d48e1faa94f51b2eb5ebe61cf91f97299515bcde23fb654a94cbd445509","ssdeep":"12288:pI/XwKnKzir7YTsVYzb/nb/X3M1MP2EF9PpKHQ:pIjnvrsoVK/nbPOAlvP","tlshash":"0e947d07936def8e9451a2e24845d0235ce2e104df3ed366eece7c5cd0258e88d79b9a","first_seen":"2025-09-06T05:10:02.121568Z","last_seen":"2026-04-17T08:01:36.639999Z","times_seen":1267,"resource_available":false,"data":null}},"time_used":2531,"timings":{"blocked":709,"dns":1,"connect":244,"send":0,"wait":267,"receive":846,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/title_sport.png?wsSecret=5f0d4d9604b17c5f26a529a5eb6aaa7b\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/title_sport.png?wsSecret=5f0d4d9604b17c5f26a529a5eb6aaa7b\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-2286\"\r\nDate: Tue, 03 Feb 2026 12:43:39 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 12:43:39 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 148\r\nContent-Length: 8838\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16854357728384378083\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8838,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 390 x 85, 8-bit/color RGBA, non-interlaced","md5":"bffe088419be3a9c643a8cd9407e29b2","sha1":"6d10a70c477a01fd9e5927e80b4ae4dfe4665f43","sha256":"115e8b860ba99cee6c4e2c3f18d92eac04feaf13870bcc19dca3887459d56fff","sha512":"b34abb59067697380244d462f6cf5da7f271a3272f05f25921ddebc5d6dbf011063f69c48aec19326ce272fba0c77433052c52fdb47c81881f89c61ceb7507b0","ssdeep":"192:+SYkknnpJ7HGzF+3zuuzlfOcdRjqQqr/xjk6rcZ35fMvP2g8i5Rn440VM:h8nz7bDuQmcH4S/ZaP2g8ARWi","tlshash":"70029e4cd6609de59d09c101aa79315d7f631f941ac368cb3ea89677ee37462ec011c3","first_seen":"2025-01-02T07:34:08.350972Z","last_seen":"2026-03-04T19:51:58.884033Z","times_seen":4,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/mobile-api/v5/chess/getActivityMsg.html?function=sign","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /mobile-api/v5/chess/getActivityMsg.html?function=sign HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:57 GMT\r\nout-line: gb-cdn-801\r\nset-cookie: route=169b5c290b6963ddbef067cfad367b83; Path=/\r\nsub-sys: mobile\r\nuuid: 01377-01-00000000-1772647077e258\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"5d062bc93ef9d75b27e852ed745d170f","sha1":"1ecf82a0589608b26ee6a29b2cc3229916596626","sha256":"26e77aa8c61c230db13c8fd74d4ab3adf8be54c3192c4e16f94e633a71efc2e1","sha512":"44400ff6867b380b16fdfda60ff144dfcc9bc4d7adc38c84a98f20d2a8911304f694eca3afe2cf9ce9538a7c49b1fb471694b4b68215c6ccc6027571b8b5ac34","ssdeep":"","tlshash":"f2c02b86f21818b38b030bd010e83d41c3fd11b2c0c84848dc4c8e4802b48ffd301837","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-06T23:51:10.815511Z","times_seen":7427,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/game-api/v5/content/sportRecommended.html?t=mmccauzh","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /game-api/v5/content/sportRecommended.html?t=mmccauzh HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=169b5c290b6963ddbef067cfad367b83\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:57 GMT\r\nout-line: gb-cdn-801\r\nset-cookie: route=cd06424ba4cc39d1f90c88edc27d9720; Path=/\r\nsub-sys: mobile\r\nuuid: 01377-01-00000000-177264707785af\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 798\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3488,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"79063c5f39491f26d3de8e6cfef3cf05","sha1":"8b7fe36cd0b0e1fc5412565654fc3f6b0b615f80","sha256":"143d23bd761501f215f3967d9afc74c4f93437ca23ca1a25f6a26d7ad4aa8421","sha512":"a10310148503f9ee50e6f2e55545da46e339902054417735b41af236b8925a77ba5f69440acd0dc51cb80443b5983e5ae83b50d64e6af5ea95ba8e758413e8f6","ssdeep":"","tlshash":"7671d02538dd4e89c71366eca2cfba8814ee978b8dc5ee5c6dcded389cc92684241701","first_seen":"2026-03-04T17:58:29.087996Z","last_seen":"2026-03-04T19:51:58.923472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":678,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/fserver/files/sportTeam/football/nba15.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/nba15.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=cd06424ba4cc39d1f90c88edc27d9720; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\netag: \"5c08ff9e-2cca\"\r\nexpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nlast-modified: Thu, 06 Dec 2018 10:53:18 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 11466\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11466,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"4cec00861867f26d3989442a4a5b40d0","sha1":"1b4aea9d43b508b803ed18430c5fc0a6c069cf52","sha256":"e1ba9d3469f9dd307e917f9fb1adc56809620f24d2ef9d0c28f1f6dcfb1493fa","sha512":"13375aa90db0758753b052edc5a891134bdb8c0194d4415566e6a9464e77321ac4f418a195efb16935e1d7ada16b6f29ce055440eed4d3111c88663dbb6e9d6a","ssdeep":"192:gWMjBEPuGYm4tdcxq7mYjBu2fJ78dMtjSddTBM5OWvEtWGFTggXvwphhckPE:gnVE2GfbyVBuqdqM12rM5JNGFTXvQhcB","tlshash":"7332b069f03713551c49b3d95e5811b27abba481f50f47c8c7baa27028e5ce0b7118bd","first_seen":"2023-07-13T18:54:07Z","last_seen":"2026-03-04T19:51:58.940771Z","times_seen":185,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/index/getAppsUrl.html?device=sportsApp\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:55.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=sportsApp\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:55 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 01377-01-00000000-1772647075a38f\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 916\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1156,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"4a7a54a2be58213ca11a8dd0ef83edd1","sha1":"53a1dfac83eeec2c6c82f94a7041632e5bdbc70e","sha256":"06405a75cf6cce3e0955dc4b3de1c64f8636959852f9c08bfece09e1663bde49","sha512":"7a665d7a17f57f1580ff5a980dd86f1e3edc718658a17ed03b8cbd580b618cfffcfee8645955516f0e5ac9067cf8d4c2f7fda485258fc946693451dd9d06f489","ssdeep":"","tlshash":"f8210ac6c891a86931f161c487af55202cfd1fb0143211507fe819042cce28ef44cd71","first_seen":"2026-03-04T17:58:29.075886Z","last_seen":"2026-03-04T19:51:58.890742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/img_app3.png?wsSecret=7dcf4d1b726722127ba75f9f2aa3d40f\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/img_app3.png?wsSecret=7dcf4d1b726722127ba75f9f2aa3d40f\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-18dff\"\r\nDate: Fri, 06 Feb 2026 07:11:52 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:11:52 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 153\r\nContent-Length: 101887\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1012825345759063579\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 527, 8-bit/color RGBA, non-interlaced","md5":"cbd00222954a5b59b255dc6f919c989e","sha1":"172e4986387478869e2c97cbaf0c038110a6b071","sha256":"90d360899bd950365de7163737b6a09aee1ddb1aa4ca309070ba4228d6fe052d","sha512":"894a2c11e033a2c2c1b14756ce3e477d9e4efe4962f25285e39a0470801217fd2470ba6410732ff60fc99836cfca0a3513d6629c7c53016b7ebd1c091e2fe38e","ssdeep":"3072:0aRpvli9wcZl8KN4Lsc58X481b44znyRG7UkTV:PRZBgqLJWo81vyMXTV","tlshash":"bea30299da4f4b1c76eb7d90e9e61096272bcbc1573de28e1ec3ded21db0a8e4c49041","first_seen":"2025-01-02T07:34:08.395199Z","last_seen":"2026-03-04T19:51:58.873534Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2847,"timings":{"blocked":2578,"dns":0,"connect":0,"send":0,"wait":247,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/ftl/commonPage/images/partner/partner-hongtu-silver.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /ftl/commonPage/images/partner/partner-hongtu-silver.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:57 GMT\r\netag: \"68b69275-16b89\"\r\nexpires: Sat, 07 Mar 2026 17:57:57 GMT\r\nlast-modified: Tue, 02 Sep 2025 06:45:09 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 93065\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93065,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5286 x 72, 8-bit colormap, non-interlaced","md5":"63e92a6cde8927f3777a388ef7bf5f3a","sha1":"71b30127f596de4e2a4a43ea87de2396e6a128fd","sha256":"245f649135e251159f236acd12e06660c1ecb47c9631b5bd69d15d48d0bf9d82","sha512":"48dd2a6fb695968c90d3dbe8519610bf5f74652d5a3a5f67b70ee03ae5b21ebe1ebc54eac750b4562c90118b462aea2d64e10bd0e38e27996ece5933f606384b","ssdeep":"1536:1AD4ypdRRLwrOEbZDdysGiRgBJnhCQTvwruozqIKX9uIQjAjYXahGx0vOlwf2:hyPQrOELyl4Ynhrw2Jt0MAI9Qo2","tlshash":"5d93129ae90cd34edb1c4afed1352a7ada8dfc51b36011814125489f2473876e32ed6f","first_seen":"2025-12-18T14:15:04.869622Z","last_seen":"2026-03-04T19:51:58.882545Z","times_seen":22,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":763,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/fserver/files/sportTeam/football/en01.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/en01.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=cd06424ba4cc39d1f90c88edc27d9720; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\netag: \"5beb963c-c094\"\r\nexpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nlast-modified: Wed, 14 Nov 2018 03:27:56 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 49300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"5a0baa832720b327108f1551c3aad4a3","sha1":"c7d0884bd10bf922986c98130a626d8ab9ce2747","sha256":"10053ceb0259013248700786e1ead18a0d0bb947b5f83697232fc0833c0b3de1","sha512":"80946b95b2b03f6c2dc5edfe7e33990f550b27d32f4aeeebc944a3e69d75f3bc7b11a66da82f7d748fe54badd8c3b36d474d87a14bf7fb748ae10e99fd69098a","ssdeep":"1536:qjFHX6zTzQ0RnK3rrLRJnx/Kiy3ItL1dL:qVCt6rrLPxii7L1J","tlshash":"2923024c12fd4d228af293954df0e42a890499082ca8ef5d8db29c19dd5f6d8147ffbb","first_seen":"2023-05-20T01:16:57Z","last_seen":"2026-04-18T23:52:30.220598Z","times_seen":1174,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/websocket/PopUp.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/PopUp.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 21 Apr 2022 04:30:12 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6260ddd4-828\"\r\nDate: Fri, 06 Feb 2026 11:33:39 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 11:33:39 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 309\r\nContent-Length: 797\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14137277516716936977\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2088,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"07864ad2e2759d53f8f2f14dd4295bd9","sha1":"95144219e2eb702c4c4a707c3622b086876cf41c","sha256":"871bf30791bb89605b61cea815c3786246274b65ede3b8a8b8c2dd9244cfa89d","sha512":"f469d0f23c75e918d55e076d72481fca7043ac5eff9025aaac1f26860d080e4fc3c5d28f8f9ee1dae80719aca2b83f39ea82a129c221980bd7d63c212bacc119","ssdeep":"","tlshash":"9041ae54baf359a12c9b71f3aaaf30413160f2479505ed017d0cb9945f1d228b2cf7e9","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-09T23:49:55.281372Z","times_seen":17819,"resource_available":true,"data":null}},"time_used":2216,"timings":{"blocked":1935,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/product_icno.png?wsSecret=abd78424c3cd4942417dfd9a6e3ec76b\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/product_icno.png?wsSecret=abd78424c3cd4942417dfd9a6e3ec76b\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 17:57:56 GMT\r\nContent-Type: image/png\r\nETag: \"613c72b3-c3e\"\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 17:57:56 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 3134\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 671220988415184096\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss, Cache Miss\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3134,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"f5c1740fa887ffb09a5073674ce79387","sha1":"aa6a26a58d030a77a08fe97b7e809266a2f99dd6","sha256":"e39a81c29f232571e17c91375b466f7ba7fe9f159b09389dc2eefa95c578c75c","sha512":"6a8a61c22e27b0ef32081105f4862fcb56af8550aa053fd865024429d33683bb764893378dc8683440a53455e79c81ef4300d61f3cbe1226fcbb5a8bf050d3a1","ssdeep":"","tlshash":"29512c8ab9222f405389e80d79d658ca993319a0bfd07057bdcd879bb8701b2cc191cb","first_seen":"2025-01-02T07:34:08.468924Z","last_seen":"2026-03-04T19:51:58.896941Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":548,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/index_spotrs_logo.png?wsSecret=97c5fbf53d87c5527e8cb29b8a590fa2\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/index_spotrs_logo.png?wsSecret=97c5fbf53d87c5527e8cb29b8a590fa2\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-4ce6\"\r\nDate: Fri, 06 Feb 2026 07:11:55 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:11:55 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 151\r\nContent-Length: 19686\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16485669268195750053\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 422 x 125, 8-bit/color RGBA, non-interlaced","md5":"01aba369de302c5628f890d2ad937d81","sha1":"6f65fe7d83b9e7d0a0f01ba04d8a39d7cc1c48e3","sha256":"273faa40a0fa1faa7ed7910fdd08d764dc3980e72a49c21b6340772d61da84dc","sha512":"41c5d117ac80457c94ffa5c7cd81284d0cc49a083022f448ea503c556d9cfe36705a27d13e7f5fe48b7368110cae26dc95ab7567d56967ad295f02608b03a4da","ssdeep":"384:SenWOz19kqXOjHWi3RaYBLRx7sDR2Qx3Rt0sThxI3QW70qL7YQqb0bleaSROxj:hWkHIHWORZwR1nThC3N7BL7/b4aTxj","tlshash":"5092c00bf5816c148e6b2c8524e2e2737f3e0b94f541a44129d0fc270db86f5898eafa","first_seen":"2025-01-02T07:34:08.349255Z","last_seen":"2026-03-04T19:51:58.879411Z","times_seen":4,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/sport_person.png?wsSecret=ad4a574f07edd164d84432e7819eeed7\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/sport_person.png?wsSecret=ad4a574f07edd164d84432e7819eeed7\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-11b09\"\r\nDate: Fri, 06 Feb 2026 07:11:56 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:11:56 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 149\r\nContent-Length: 72457\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6871750181315837307\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72457,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 393 x 740, 8-bit colormap, non-interlaced","md5":"a1b69742c4106dd7204a8ddec80142d7","sha1":"82f6b9da4da82535250e5ebff380ec09c0938342","sha256":"071d85c1a36c312d6c598a3da0ed423bee00be064d7dc0a47177611140e95b98","sha512":"39256ed65b31666f17bbc3bfa9ebc8e63ca456d5e799c8d2621ccfcf2467fa0dd4e3242d359eb82cd732cfd123e33d1a30772d1243da3ec2f2489a768a52b9d9","ssdeep":"1536:97zQmnkErj4TRzJHPskeqxYHdWXHFXH/IfJCorH4NoYufOq:FznkEATRtHPskeq4WZH/EJXTYufOq","tlshash":"0663029dec7f259b27faee0ce63183663588d98e72418962914ffaa35521521f068c83","first_seen":"2025-01-02T07:34:08.381024Z","last_seen":"2026-03-04T19:51:58.921808Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2636,"timings":{"blocked":2340,"dns":0,"connect":0,"send":0,"wait":293,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/register/getRegisterData.html?c=","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /register/getRegisterData.html?c= HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:57 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 01377-01-00000000-1772647077c223\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 89\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":110,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"742d0d0ce9e7962da0a059d68eab7735","sha1":"6bacb103d26be2865511905b02a2b58fe957407f","sha256":"4a167ed04b9f298430c1f5bdc5878f5a5e876cd19f40f51846b75d12820709fb","sha512":"cb0e7944c51e6e8f824525b2072f7d9da4c5603e3dbe55202fc3854a6c42c1d0369d442a7ad02599f51d77f8fd2b6005dbc18b98d3201cf8cd19688ceb3e72f3","ssdeep":"","tlshash":"3eb012181075c8b9dc3fd60cad07b5ca017dd32971c39e968bd9ee5892841d84050757","first_seen":"2023-06-07T12:23:36Z","last_seen":"2026-05-28T12:49:52.709435Z","times_seen":45,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":842,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/gui-base.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/gui-base.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 17 Aug 2023 06:15:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64ddbaed-ee5c\"\r\nDate: Mon, 16 Feb 2026 23:42:35 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 19 Feb 2026 23:42:35 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 15779\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14718082965128641003\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61020,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11056)","md5":"e6ce47d880d7a50ddf91b074c8572edf","sha1":"6a3657c67209136e5b544859daecf16f2d153b72","sha256":"c49e04c7ecfd07c74b58cf161ef2b58f2bc837a9091ed1ae090a33734cdaa734","sha512":"0946a1cb9d048b485dadf4056a4aa7be685a8906240a828a5ac776a4e1eae2ed5ef238bd0724da41cce33324357ba44704d34a6766430f1552630f9a17b664f4","ssdeep":"768:+lkflKVlvREcS38xHmuqrRO/5IS3oFaJX+mQdudqD9jAXImsUh8H3yALdODRG4eK:6ClKVlvREcYoHz0PszIfoALkMEY16pB","tlshash":"4353c80a72b130a106efb1b6515f460d323a6927d44ac458b97c9ae43f74f28316bf7e","first_seen":"2023-08-26T00:19:56Z","last_seen":"2026-08-09T23:49:55.283117Z","times_seen":17106,"resource_available":true,"data":null}},"time_used":2303,"timings":{"blocked":1981,"dns":0,"connect":0,"send":0,"wait":321,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/index/getAppsUrl.html?device=ios\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:54.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=ios\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:54 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 01377-01-00000000-17726470748159\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 916\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1156,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"4a7a54a2be58213ca11a8dd0ef83edd1","sha1":"53a1dfac83eeec2c6c82f94a7041632e5bdbc70e","sha256":"06405a75cf6cce3e0955dc4b3de1c64f8636959852f9c08bfece09e1663bde49","sha512":"7a665d7a17f57f1580ff5a980dd86f1e3edc718658a17ed03b8cbd580b618cfffcfee8645955516f0e5ac9067cf8d4c2f7fda485258fc946693451dd9d06f489","ssdeep":"","tlshash":"f8210ac6c891a86931f161c487af55202cfd1fb0143211507fe819042cce28ef44cd71","first_seen":"2026-03-04T17:58:29.075886Z","last_seen":"2026-03-04T19:51:58.890742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/live_text.png?wsSecret=dc946db01453b5be33ec111eb067aab1\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/live_text.png?wsSecret=dc946db01453b5be33ec111eb067aab1\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-680f\"\r\nDate: Tue, 03 Feb 2026 12:50:04 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 12:50:04 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 152\r\nContent-Length: 26639\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14351692602101145014\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 516 x 740, 8-bit/color RGBA, non-interlaced","md5":"b42a914a07523c79da4171bf3f7f2b0f","sha1":"4ce014d591936d5eca3843c750081d9e5be92791","sha256":"0297c0ef485d059fa954d8580a47e7aab9604005848bac3067a6dfcbaad9cbb5","sha512":"f79e38dc6e7b4f99e6ae23a68ea5d82ed164faa23f72c5e108e7d3a139106c6935c3d4e49c6b5077757b523a4a0377fd899e3963ed890ec6a2919be0c96db5df","ssdeep":"384:LenCf0j7xTN18WbjUIKh6owPHh0o6ezORtB6ss4Uf3VjqDpgBlfQKYBVa1T2E3uv:qtjl/DghGPCwXx3ZXBl/YIZusQ","tlshash":"1bc2d156ae56edd4883da17e647b9fff1713438f206510aab4ca7cb48c30b92980c5ad","first_seen":"2025-01-02T07:34:08.377089Z","last_seen":"2026-03-04T19:51:58.879924Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2343,"timings":{"blocked":2093,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/lottery_person.png?wsSecret=15ba1df119dc0d75a4952bd0865a48cf\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/lottery_person.png?wsSecret=15ba1df119dc0d75a4952bd0865a48cf\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-18bd5\"\r\nDate: Wed, 04 Mar 2026 17:57:27 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 17:57:27 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 32\r\nContent-Length: 101333\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7354977922013164579\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101333,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 778 x 740, 8-bit colormap, non-interlaced","md5":"3dc1c2f69468e6faccefaac3fbec53c8","sha1":"d2bb4379d68571a75b8f8083a4fbdafa63805fcf","sha256":"5cc36b10c269c1b9ec0cfaecdb6ebdf8e4388c574bd2f1d1dcf4208d828cd543","sha512":"80a6e4112f3abb9be664bb5748d6aa886c58990432c8c1ea5bed688c1c660beba18a3c4358776e639d6cc1b978ca1a0567048e3ecd5205470433652ce0fcfac4","ssdeep":"3072:PycY7fLGokFGEWqH+vv43u6kI4VOsT/ocXi/6o:Pyn7jhkFGEl+HR6Il/ocXi/D","tlshash":"e0a3123853760dc73028594af8e066bed62bbdfd2e2a7ac36ef1949ddb260157418212","first_seen":"2025-01-02T07:34:08.388102Z","last_seen":"2026-03-04T19:51:58.886566Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3496,"timings":{"blocked":3207,"dns":0,"connect":0,"send":0,"wait":286,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:53.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery-1.11.3.min.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-176d4\"\r\nDate: Tue, 03 Feb 2026 09:42:04 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:04 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 1\r\nContent-Length: 33545\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 781287918563533503\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-09T21:02:50.879029Z","times_seen":18423,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":312,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/top/kefu.png?wsSecret=00b5bd5c830df1b95469c25e5837c2a6\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/top/kefu.png?wsSecret=00b5bd5c830df1b95469c25e5837c2a6\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-82a\"\r\nDate: Mon, 02 Mar 2026 12:24:27 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 05 Mar 2026 12:24:27 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 348\r\nContent-Length: 2090\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5422323632710372131\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 27, 8-bit/color RGBA, non-interlaced","md5":"d28398fb367cb8e16348b146705a943c","sha1":"d3d5ba73ca2754762cb3f7884a7a08563fd184a1","sha256":"6278dff4861bd5ede7bab26812ac8dc3c8b38dc7f5f9148075b6e6592d8bac6f","sha512":"9353be5f8739ed0dd6c53daed24fef28c7ccdaca73b607e0b76b39f87f4aaaa3ad79d365f6158816564c6c7a5606665f99968f974686e52d411c4b185bdf1105","ssdeep":"","tlshash":"7f41c749f610ac479146eb46adf1235bae134f80ca916983bcecc80768651f1ce8c6c2","first_seen":"2025-01-02T07:34:08.462659Z","last_seen":"2026-03-04T19:51:58.938283Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":755,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/index_sports_bg.jpg?wsSecret=8ee028b5ebbc27b5aed2405c942ed150\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/index_sports_bg.jpg?wsSecret=8ee028b5ebbc27b5aed2405c942ed150\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 17:57:57 GMT\r\nContent-Type: image/jpeg\r\nETag: \"613c72b3-14e8\"\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 17:57:57 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 5352\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1546544602641366181\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss, Cache Miss\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x697, components 3","md5":"492d593b3234d5680a8f197b30beb11e","sha1":"8bd309f3ad80011561e0fee84fc7fa9dc905669d","sha256":"05a979bb47cdf6a8408ccb6cb2529f094cb2d146bbde0a6d73f71abdcc3174ae","sha512":"debec6c35e6f94c2c29e9cd53fbe24b893b6294bc353a1e1915bd464be6fe3da06b7b4cfc8e29d0ceba50c794a5c9b86ea25f5ed76af0fac0dcdff26238678dc","ssdeep":"48:M6v6u7ZB6A9PwxArLiFG23DFwGs/Z0pGh3RWW5E99YJAjFTbRd5qcKrxIq9ty3Nc:MMr77l9PnLiFjDBs/9hBWWowMNc","tlshash":"96b19473ef01e617c1282730999b6b587f1686a3c3480f07a74a5935adba3583d8ead1","first_seen":"2025-01-02T07:34:08.367323Z","last_seen":"2026-03-04T19:51:58.911992Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1397,"timings":{"blocked":812,"dns":0,"connect":0,"send":0,"wait":584,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/fserver/files/gb/1377/carousel/10013/1598237827115.png?wsSecret=f6970fbbd775397cef2f724f88a3a7f1\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1377/carousel/10013/1598237827115.png?wsSecret=f6970fbbd775397cef2f724f88a3a7f1\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 17:57:57 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nETag: \"637d141f-5bf98\"\r\nExpires: Sat, 07 Mar 2026 17:57:57 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nLast-Modified: Tue, 22 Nov 2022 18:25:35 GMT\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 376728\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11933775192250173859\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss, Cache Miss\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":376728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 580, 8-bit colormap, non-interlaced","md5":"fa1b1afbf77ab31c60860e9d29136003","sha1":"e4d155b5d502a05e50a33aa52d44361196269f72","sha256":"dd08586a4ebb110e1c48c11d4b466c1578a7e160500da61da750878e1e514490","sha512":"f2056c56f86541f079e103b5712f10948a6e91c21ccb686bb4b69567df11d4fc87d3f2314d5ce5ae02ed201080387bc3d5ef4c6582031e0563760d2648d1463b","ssdeep":"6144:hUsg+/F8s16ORTbhpEtedccPfQECOeE/SC7QGt/V8r9hglbNSxlg7E:X8sX9cBcQEblSC7L/1lJa+E","tlshash":"1f8423a0051fdeea964b86a945c7bc26eb271b264d4c41b8e04cf6ba4dd7d54fe03f80","first_seen":"2025-01-02T07:34:08.401451Z","last_seen":"2026-03-04T19:51:58.934998Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2393,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":446,"receive":1947,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/fserver/files/gb/1377/carousel/10007/1598237514908.png?wsSecret=5ce97559c1ab66acadb5e9bf1c22f560\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1377/carousel/10007/1598237514908.png?wsSecret=5ce97559c1ab66acadb5e9bf1c22f560\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 22 Nov 2022 18:24:58 GMT\r\nEtag: \"637d13fa-20fe7\"\r\nDate: Fri, 06 Feb 2026 07:11:53 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Mon, 09 Feb 2026 07:11:53 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 149\r\nContent-Length: 135143\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5016748761735142089\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":135143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 692 x 516, 8-bit colormap, non-interlaced","md5":"bdc38468fbfad253eac2eb23bb0090cc","sha1":"ff0712a6f2a7e8873e0006eccca1ac3548956e9d","sha256":"6e39715d637a9b2c480bd631b722f444766cd60dab5412aa023714e4f3e1ac11","sha512":"93d9f7dac6dcaf0586184d71b306762969c7290974f4d348b8daef52d454103084f5a640c175dc17ca8d1fe298ea335ea0daaea8b73894c5d628ed8bf7d7ed20","ssdeep":"3072:uninNYDglv/snmlD/NoYdyBc8sRtJmAjopR:hNJd/mYdyB/qmeI","tlshash":"c5d31277d38b907e4334d295e8c369c4c2d366b588409339bc40fa2b874e63a947e5bd","first_seen":"2025-01-02T07:34:08.408683Z","last_seen":"2026-03-04T19:51:58.914169Z","times_seen":4,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":630,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/fserver/files/sportTeam/football/nba05.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/nba05.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=1a7ad16788516453862c0c43d835029d; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\netag: \"5c08ffaa-392f\"\r\nexpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nlast-modified: Thu, 06 Dec 2018 10:53:30 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 14639\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"c4ef74d9951cdea904807dccc3d9be22","sha1":"5a5c1bb2718bb31c3ef34b9cdeb17e86dcd20fc3","sha256":"66a61ff8bff344cc34fa9cdfd21a5cc3b4e6f4c0d5def68ea4e202bf4f634e9b","sha512":"a08ecf0c9a6e0c73c78c87bf01d23c3b31923ff7e67e54e4716dd58333eef0574232683b4445874f1a3002ad87aa4275e02fa07b3b7c20bae799b0a51e20b87e","ssdeep":"384:nA8+DYLfdcMMgimKSq5XKnCkvt7BXEcaPTHvaRYz7W9v0Ndl47y:nxdcMMgrb2KnJCcaPTPaanW9Qe7y","tlshash":"bb62cf16a6883b8ac39bb4ad704f1e649f6235100bcf7685553735fcb2b8720b45bd83","first_seen":"2023-07-08T00:58:19Z","last_seen":"2026-03-04T19:51:58.912981Z","times_seen":141,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trxo9lz3ts.025cm4i1.com/livechat.ashx?siteId=5001622","fqdn":"trxo9lz3ts.025cm4i1.com","domain":"025cm4i1.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.962Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /livechat.ashx?siteId=5001622 HTTP/1.1\r\nHost: trxo9lz3ts.025cm4i1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T17:57:23.859173Z","times_seen":17821759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/lazyload.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/lazyload.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 07 Aug 2023 03:05:10 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64d05f66-2f79\"\r\nDate: Sat, 07 Feb 2026 04:44:05 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Tue, 10 Feb 2026 04:44:05 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 309\r\nContent-Length: 2731\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7803867958299928173\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12153,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d87854586672bff7f886a47da85da5ed","sha1":"8d0537030dc7a81ade87a41a75fd5a75e4e33da1","sha256":"17859187f895c27de8869fb6bfec579fd68c4588d0af71d08d334be92d144ada","sha512":"d8c3e724f00bcf1ebfe1f8e96dda01243cf22aef18a0fc5a25a42d84458ff58a22a316dabf1d80d1b4f4c28db79edbdf9ba19df755d72f2b0b9f64497137672f","ssdeep":"192:Cdr+EgBD7NiM7B1wV20jSCQrF/bcbe7/bgdCx4RTsmS3KDsS3CggvBSChKRJ0Suk:Cdr+JBDYpV20Ez+obgdsm3ROCJIqSJvG","tlshash":"304200483deb51aba1d3b0f89a5f11447235810b160eee253d6c9395af6093932f2ff9","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-08-09T23:49:55.277546Z","times_seen":17652,"resource_available":true,"data":null}},"time_used":2257,"timings":{"blocked":1981,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:53.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nEtag: \"5d848f4f-1ad7\"\r\nDate: Tue, 03 Feb 2026 09:42:06 GMT\r\nContent-Type: image/jpeg\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:06 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 6871\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13432153158071614045\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6871,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 168x168, components 3","md5":"99be4bfe275809d4e436b77c991b1381","sha1":"54eadee77394eb62ccf377ae68d9f49acb5b6785","sha256":"4ca35131972acdf420b94f0d64a5a0f504eb5a7b0e6fb7b8b467916a12aae37d","sha512":"452a79b02619ed5c1e4f81fc5a4a209cb8a11d03aadb1841ae9be18fbca088652cdb54340329c1bf57771abfb02ffed4bf75b61f4df96866b7f2358c36ae75a3","ssdeep":"192:p7FikLUR+6X7MCy5nSb1jSG99DX8yclWGo2yscY8:pfA3+gSGjX25+Y8","tlshash":"4ae18e26da8bdb85c4a4f2713f7d881a5551da1a5bd3f02160f8c41b3c9327c15e7a8f","first_seen":"2023-04-30T20:28:22Z","last_seen":"2026-08-09T23:49:55.269275Z","times_seen":17822,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/countUp/countUp.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/countUp/countUp.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-1be4\"\r\nDate: Tue, 03 Mar 2026 01:10:50 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 01:10:50 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 3\r\nContent-Length: 2080\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15323406472142399709\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7140,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3e9a58a52dd5597d17699c8d25c2841a","sha1":"26e032f2abad781cce71814bd6d43138db8f89be","sha256":"b14b3f362ef456b8ef3d9525e5fb6f88f04135a39551edeb88d840e220d012bd","sha512":"6e9cdf308f82ea204e7a97404532d4dfef4b6f1d7c4810d9cdd279112afabb1f982196691718306e21a72b5cb1aef66fc71d0f0546944942ae77b56adc7978e1","ssdeep":"192:a3+jBTUNKveiCoWsyItBF2qb2VAgCy9HLqNx:a3EEKpUo","tlshash":"ebe1db8a55b312212a137a6b9b8b33432a3f8633241dd8a97c7e13811f9542247d6ff8","first_seen":"2023-03-07T12:39:28Z","last_seen":"2026-08-09T18:46:10.42681Z","times_seen":2143,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/fserver/files/sportTeam/football/en05.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/en05.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=cd06424ba4cc39d1f90c88edc27d9720; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\netag: \"5beb9672-1f79\"\r\nexpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nlast-modified: Wed, 14 Nov 2018 03:28:50 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 8057\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8057,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"d4d526ca101ac220b53a7d9eb007eda3","sha1":"82a07f37e5e53cc4a2e2316fadebb9bccbb1f8e6","sha256":"48fce16e7be46211674b1e2f2c9c8c80fe5f4f2ad20e0bf00f89a428128c7583","sha512":"442f2e85029b95cb1ad19711774654b57c80ad4b3000072ca0c1b88ccb4e447721efb0ec37860c83cb5df0df3a4c2e08f3e85132432893c15c802e7e42372a55","ssdeep":"192:dcGWhSzjAj76Ev4kJKTDfzACPSlDCl6a96cQFn12e:dYSzc//KThPSlCY5J3","tlshash":"7df19d6de860c5f7cbb916b8ac3579447551cc6c842a39ed6183afbc92a0060eb16246","first_seen":"2023-05-20T01:16:57Z","last_seen":"2026-05-01T19:32:21.632917Z","times_seen":760,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/moment.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/moment.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 18 Jul 2023 06:40:10 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64b633ca-1cab9\"\r\nDate: Tue, 17 Feb 2026 22:22:06 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 20 Feb 2026 22:22:06 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 26968\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16628023324771679356\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117433,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"36c8f828395a9395549bd6e7307cb7e9","sha1":"f30a4961558e2d3d4405e7d93aa28fdb63245e78","sha256":"5d5e32fa1e06a0bc9396f349d142ad248e82086543e438c890e43f41e692db33","sha512":"40c24a9011e1bbdd98bd95b341c400bdaf48fefd953fcb407368fe3c685ac09196b55e230c03ca9890c35fe9acef2c916bed52423dc1a7b532a1db9817c03a8e","ssdeep":"1536:qOL1yBkBeb9wNoHpH7tjl2Ulwjwaj2BH3fMobEKeYEoZYiMirUw0:qOCWeH70R2BkobE+cw0","tlshash":"aeb35f5a59e31023496362294fdf2011ba388123590dee487d8da3d49f9ed7c47bafec","first_seen":"2023-07-29T10:21:40Z","last_seen":"2026-08-09T23:49:55.278406Z","times_seen":17896,"resource_available":true,"data":null}},"time_used":2657,"timings":{"blocked":2345,"dns":0,"connect":0,"send":0,"wait":311,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/theme/default/layer.css?v=3.1.0","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:53.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/theme/default/layer.css?v=3.1.0 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 03 Sep 2021 08:10:10 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6131d862-48e4\"\r\nDate: Tue, 03 Feb 2026 09:41:47 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:41:47 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 1263\r\nContent-Length: 3111\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5592936930239298594\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18660,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5cf9259b7dd27aacd46161ec23d261cf","sha1":"ba0c399616a5ae9cdd8aec5b76ba4aae4822367c","sha256":"7f73a66b3a9a38576d124b6243a8984d795028e3493b8fa3f688d8dbe10cbccc","sha512":"834ae73090b76f7dad48a5efa850a0009d5104cfcab402b7c343ceb49410584c3a60a4eea800d366f380dc8364f5f00e3d38101c379fd5fa19f9492781d9ada1","ssdeep":"192:99OUf4PBsPIOpyNYpyBVpkgdpkqg60yQG0yrGlwSlyDXLIXiYHIli5aT6XeFTfb1:C4CyFP/FgkFxUE6QS","tlshash":"b7821de599a31584751b8214dbee267232f85c83e40fcc6cf7df354f4f086a592a1a4b","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-07-06T07:37:01.527204Z","times_seen":17719,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/index/getAppsUrl.html?device=h5\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:55.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=h5\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:56 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 01377-01-00000000-177264707635b4\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 916\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1152,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"1f4ed715f0a857264fb2715d487859ca","sha1":"6060c7b730fcb952faab41f8d1c3cc1956e2e226","sha256":"8af0173cd762b506006088748cf1aa5191b2eb15ec06273d5375e95dd3265496","sha512":"6744180b7190f424a3c714531a9bbdb34bab587c41ead56c61b659c5bfa85eeb20e7d5b9cc54fdb5a5184a32475d7ba9f21301497d1ff273265d1321129ea20b","ssdeep":"","tlshash":"0c210a3719c75cb076cfaacb0b2fa9800889df3084c621a660dc5882fbe6152492ac38","first_seen":"2026-03-04T17:58:29.116182Z","last_seen":"2026-03-04T17:58:29.116182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/sports_football_02.png?wsSecret=e268d6cae524fc3f34573c269c60f838\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/sports_football_02.png?wsSecret=e268d6cae524fc3f34573c269c60f838\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-149bb\"\r\nDate: Fri, 06 Feb 2026 07:11:55 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:11:55 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 148\r\nContent-Length: 84411\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4953618334109752228\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84411,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 474 x 604, 8-bit colormap, non-interlaced","md5":"fe6436fe9b960766d0a2ce7ff84fa576","sha1":"be58b0cfdfed79944db3d524d2e865f6b523f38f","sha256":"7010872d4246fa2011ee603226be1638ca20abec9469a98a3568f1f1e0fe4f3e","sha512":"827d8d1f7b2737befa1cb6ff9facca00a2a14e08d453ec5167cba9a729c0bcaa47dd437fe6362fb20fdcf1f95d2ef308fc7d7ac2dd58501d0b7046a7ea3b3c46","ssdeep":"1536:fYP2qZ/twqrRt2bNSGWzFLXJm0hUoLT3wS5ftFWk47y3ofMBVioohAgMEGRtdzu:fKb1tLttiXWfYuTASdS0ofMSt6Hda","tlshash":"cb83028cfa791fd9ed8686d2b02c321d21216c3796d7de35ce8f79a0b0d8ac216d7052","first_seen":"2025-01-02T07:34:08.347494Z","last_seen":"2026-03-04T19:51:58.908839Z","times_seen":4,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":303,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/fserver/files/gb/1377/carousel/10065/1772204970683.jpg?wsSecret=842431dbe4fdc35f8e392190b7e1f1b9\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1377/carousel/10065/1772204970683.jpg?wsSecret=842431dbe4fdc35f8e392190b7e1f1b9\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 27 Feb 2026 15:09:30 GMT\r\nEtag: \"69a1b3aa-60bc4\"\r\nDate: Fri, 27 Feb 2026 15:48:27 GMT\r\nContent-Type: image/jpeg\r\nVary: Accept-Encoding\r\nExpires: Mon, 02 Mar 2026 15:48:27 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 152\r\nContent-Length: 396228\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5826462306515497682\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":396228,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 692x516, components 3","md5":"d09c6b65fd529767eae6c8b84727eaf7","sha1":"273dc224f43d2343a3422fb1ef617622ece6a438","sha256":"d3f4765e5a90173d17b8b43f8c5f2d41322b836c0886175d4ae7fd834f446cb1","sha512":"531acf3abddfc5318126928c809bc88955176247f9a02d6fb58bad8cecb6858f14939c68eb83a229cc810efcbc22984b58249defc7962b95a14f18444ffcba54","ssdeep":"12288:Hv1YeBa0qIBhY8Ap5FETk9fYcv5Y2BKvbz:Pawqch/ADFEoQkaMKX","tlshash":"858423e1843b6776875c330adafb150a19e71faa075bc1207608c8eaf0552ef9d494fe","first_seen":"2026-03-04T17:58:29.118702Z","last_seen":"2026-03-04T19:51:58.889449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1065,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":770,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/part-4-title_2.png?wsSecret=fdd9223fdf71faacc5abbf7203abf2a1\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/part-4-title_2.png?wsSecret=fdd9223fdf71faacc5abbf7203abf2a1\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-148a\"\r\nDate: Tue, 03 Feb 2026 14:37:16 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 14:37:16 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 148\r\nContent-Length: 5258\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 213549054629268749\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 45, 8-bit/color RGBA, non-interlaced","md5":"2270df9349d6157b2481ad53898fe909","sha1":"10dc9071a4136674218f9ebb1117b6e5549dd0a3","sha256":"a4ac152db7e9848c7534b554838d927e9539aa2be7681c3f80b16ca9092009b0","sha512":"b4cfa24e49d748f394f77930b0716b1cb43aa9ab77a6538523c5783dfe0e25037e548f8267e24aefbfdcc0fed439a0b44d4d4249ed00487f24983f608c2c6e9b","ssdeep":"96:OSJYkknmWIYJk2/dm/YuHnso7V2eeAa+oW3wzGBTffUm9W3qRsWbD:OSykknnkhHh2Z99YwzGJnUm9W3qBbD","tlshash":"cab19f55dd22cc445e49f08869f52a8def7301c086c161653cee4297fcb1175c1317ed","first_seen":"2025-01-02T07:34:08.368686Z","last_seen":"2026-03-04T19:51:58.901158Z","times_seen":4,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/jquery/jquery-1.11.3.min.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:50.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery-1.11.3.min.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-176d4\"\r\nDate: Tue, 03 Feb 2026 09:42:04 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:04 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 33545\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6709375178882000567\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-09T21:02:50.879029Z","times_seen":18423,"resource_available":true,"data":null}},"time_used":2110,"timings":{"blocked":1809,"dns":0,"connect":0,"send":0,"wait":300,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/plugin/js/zcircleMove.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/plugin/js/zcircleMove.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 30 Sep 2021 09:36:26 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6155851a-1541\"\r\nDate: Tue, 03 Mar 2026 01:10:48 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 01:10:48 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 1592\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6023576296610032176\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5441,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"6cf3197be7474657b55be9a8ad315e69","sha1":"2cf2927d57466082eadf68225f3720ba184456ee","sha256":"e10e9de27d5b1f3c55345f40aeae25623a3f3744d2adcbd744fa2bef63e77c60","sha512":"42a9f6990ba0c9cf571a282d26d23d0329f1fd23b050a4f9add5b722fd3787e922b937283a803dc774dc6d4d94d2fa68f8e2020e03291839ce29a5891ad765bf","ssdeep":"96:VB+Qw6eqI8DwZN+BSZv4+VxXqUUL9ALAH2EXg+kGBOk2Qr:VB+0stJVxXqUUhA8H1g+keOk2Qr","tlshash":"60b18c385877158abd631a89576f71087296f1038203d936761ed3981ff811a91ef3fd","first_seen":"2025-01-02T07:34:08.310236Z","last_seen":"2026-03-04T19:51:58.897872Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2893,"timings":{"blocked":2563,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/slide-inner_bg.png?wsSecret=6261af2324430da3b808d859df979bd3\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/slide-inner_bg.png?wsSecret=6261af2324430da3b808d859df979bd3\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-cf40\"\r\nDate: Fri, 06 Feb 2026 07:11:51 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:11:51 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 151\r\nContent-Length: 53056\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6211571972838246545\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53056,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1045 x 675, 8-bit colormap, non-interlaced","md5":"40e962d679f66de6e40dd8f7ec4051fc","sha1":"3791a927d17e5c8312eba1b0f032014277fa47cf","sha256":"c0bdb25b8ebd7a49e19901a7690ec8789aed61b9ce85584859f1aa48563aabb7","sha512":"59ea299d465dae5c18393e1f755f97ecd7761353b564d816e21d398caac0b907bbc898d698bebd36ad9fd2b05c29f34337335cb7923e1ca47033e246d2e349f8","ssdeep":"1536:jq/j67WvUTXTn7Vb7f7IwVWBE/MXc53312MYCMerpAQsqo:O+QUz7BUsUcuYo","tlshash":"d93301f63821850e436a8d655aefc99e7c7f478add0e8215d1c021ad27dcdace88743b","first_seen":"2025-01-02T07:34:08.379613Z","last_seen":"2026-03-04T19:51:58.932411Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1318,"timings":{"blocked":1060,"dns":0,"connect":0,"send":0,"wait":255,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trxo9lz3ts.025cm4i1.com/livechat.ashx?siteId=5001622","fqdn":"trxo9lz3ts.025cm4i1.com","domain":"025cm4i1.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.960Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /livechat.ashx?siteId=5001622 HTTP/1.1\r\nHost: trxo9lz3ts.025cm4i1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T17:57:23.859173Z","times_seen":17821759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/idangerous.swiper.min.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/idangerous.swiper.min.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 11 Aug 2023 04:30:09 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"64d5b951-b083\"\r\nDate: Sat, 07 Feb 2026 22:29:28 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Tue, 10 Feb 2026 22:29:28 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 49\r\nContent-Length: 11957\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14102226103317601274\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45187,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32034)","md5":"f15409fb02c527ce1f66a2fd3c4aa0e9","sha1":"1e1e1bcc0f49e99e14ba34991cffe0745178d302","sha256":"1a1b5d3d6fbfc28abe37a668abd59494208c63c5f0b5d040cf4bbbd137f87c27","sha512":"66a384d6ad5fba862e778e24c43326a718328b6f860469fb5eb69c2687b0bbdc3c2dfa9049b0e3d5509214db1dbec4477f5c3654dc04446a505379a4300d4908","ssdeep":"768:oTFZ8CkWyYzh9MTvl7prcAgQW5ppZ+rPPWRqKDyBuq0t:cZiY9uTJuAgQW5LZ+rPPWRLt","tlshash":"5613f8c1b32031a741f3626e91fecb4271f54966aa05d4dcb5ed84c41ab489a03beff9","first_seen":"2023-08-15T12:01:05Z","last_seen":"2026-08-09T23:49:55.276199Z","times_seen":17521,"resource_available":true,"data":null}},"time_used":1997,"timings":{"blocked":1695,"dns":0,"connect":0,"send":0,"wait":301,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/layer.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/layer.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-55f6\"\r\nDate: Fri, 20 Feb 2026 14:45:51 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 23 Feb 2026 14:45:51 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 7599\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15343332124422143518\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22006,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21910)","md5":"cb96339625e9d456e32f86cdb3c7a7a1","sha1":"1301165c58bbb13c542cba493b7ab5774e87e31f","sha256":"17fb047ba6828fcbdf2ca226fa4594cfded2b2fdfeaff89a5bd81c7cf0359919","sha512":"53083bf4d6d450b1e9402c3f3dc40fb3434a27d47fbabee51f4ce1d3577f2a0aabe90cf5f6dfc22830a3878ec7552a6bf6bff605c82a4f832c79f34f7657ccef","ssdeep":"384:r1dCih92A3DgrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:r1YiV3D+WtXItqF13k8","tlshash":"6aa2b76a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.284506Z","times_seen":17853,"resource_available":true,"data":null}},"time_used":2350,"timings":{"blocked":2035,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/game_person.png?wsSecret=2a47f45db5611f0b858d8b98c9004a2f\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/game_person.png?wsSecret=2a47f45db5611f0b858d8b98c9004a2f\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-148fb\"\r\nDate: Fri, 06 Feb 2026 07:12:05 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:12:05 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 141\r\nContent-Length: 84219\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16307824648373843852\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 603 x 740, 8-bit colormap, non-interlaced","md5":"e858b872c814d1c0e8db6a42b9e6243c","sha1":"111b16360b53788a8fc6ee0d4223b1b4c41c7d23","sha256":"645964749b38e7f865b27127d8da72b92c057fb90c60ba943e5704cc2bce5661","sha512":"0549a59192c0e3ccdab5920fb193a546c62f83c57eb1f931e0dad52a623dbaac1013bc2439c47ff7f811628ed215120460a5300d9262da61aab85775a83c3f1e","ssdeep":"1536:Crbog3qN4ROBsLATTySx+jxY91InYjxBTjIREhxLiMAffgkt4R5Wl:CrbNzg/TWY/IYdBTcsLiRHqWl","tlshash":"688312ed7ce092612b6eefaf5b4aad470c00d1cb80315d85f2ffd7a15aa745a60081b6","first_seen":"2025-01-02T07:34:08.387002Z","last_seen":"2026-03-04T19:51:58.938923Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3278,"timings":{"blocked":2977,"dns":0,"connect":0,"send":0,"wait":297,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/061410/rcenter/common/static/css/gb.validation.min.css","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/static/css/gb.validation.min.css HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 05 Oct 2022 09:40:30 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"633d510e-2d52\"\r\nDate: Tue, 03 Mar 2026 02:10:36 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding, Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 02:10:36 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 3788\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2868527814666195253\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11602,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2295)","md5":"12630e8fd95b53f705159b9cd1c2b372","sha1":"1be26841536b82ff280211796e9de339c642795f","sha256":"2c0c712726319f142f14ea06ccdba0ddb9f880571581ab1d0c193d4083a5baa8","sha512":"3084c7d3f917e379235e29b0f641e69f7a9a89b9c30b088292e3b3800cc67e16414b2df9aed1ed144cd2c37bbd035a8f6389d71ace13d17dd32a315c7719a88b","ssdeep":"192:zyzNcfuLLpjyFp291taF4lcrCQ4RFvVhkxP4OKyptj6ZqQ:znmdyF24F6crCQ4R4P4Dx","tlshash":"ed32a673ba220244790d9d442f46ee02bb1b40176a4f8eabff91786cdf825c9b67074c","first_seen":"2025-04-07T03:18:03.798848Z","last_seen":"2026-08-09T23:49:55.279686Z","times_seen":11180,"resource_available":false,"data":null}},"time_used":2856,"timings":{"blocked":2551,"dns":0,"connect":0,"send":0,"wait":304,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/jquery/jquery.mailAutoComplete-4.0.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery.mailAutoComplete-4.0.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-102e\"\r\nDate: Tue, 03 Feb 2026 09:42:06 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:06 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 1715\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13048983256675397964\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4142,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"08e5a86e482c2cacb81fefc656248104","sha1":"80a09e4000e7a2305498ce1a99b8f52991cf2e1a","sha256":"b976748094d2676273e388bc3632321d9c8e44e191a0cb69c87779a933ee1650","sha512":"0a592cd1b909bf4aebd2cad4c4556fc4460aa6ed0aec0fc642374dafeb9924929d80e167d1f45d9e5dd93210af8de69840665963bc71e2f0b3a261b970b7a5f2","ssdeep":"96:ZaN1VI9nylyy+B6hAnlA4xmsKVwH1Dsejz:ZAzCnyl+BpFmstH1Z","tlshash":"c88122a0f35c91f7059e7213654e5acd91be40bb5c1529afbca05a0c38f8daa232dc7d","first_seen":"2023-05-18T23:52:16Z","last_seen":"2026-05-28T12:49:52.674633Z","times_seen":111,"resource_available":true,"data":null}},"time_used":2743,"timings":{"blocked":2451,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trxo9lz3ts.025cm4i1.com/livechat.ashx?siteId=5001622","fqdn":"trxo9lz3ts.025cm4i1.com","domain":"025cm4i1.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:53.959Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /livechat.ashx?siteId=5001622 HTTP/1.1\r\nHost: trxo9lz3ts.025cm4i1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T17:57:23.859173Z","times_seen":17821759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/ftl/jxf1377/themes/images/hot.gif","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/hot.gif HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=259200\r\ncontent-type: image/gif\r\ndate: Wed, 04 Mar 2026 17:57:57 GMT\r\netag: \"613c72b3-56c\"\r\nexpires: Sat, 07 Mar 2026 17:57:57 GMT\r\nlast-modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1388\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1388,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 21 x 12","md5":"e5f49d4212fec35b11b76cd616e1f8ec","sha1":"0697a3b11f5d0906b2d1cf59051b46ee3b5dc72a","sha256":"c34ed994680ca6446b85dd47aa963cd4cfdd07180a9517b4d7d37f3c7a1b94cd","sha512":"a7057e7e9cd4fec2ca911ac507ce7161412f8813453ceb3f2a1d28380fdaadf1e8d5119eae83f92ae001ca7f8a2cf0f0c0369a8ef2af4d751b6a08053c3efc94","ssdeep":"","tlshash":"3421660eed42b841944c68da3effc81f5651448089e4f4cbb49e6d1b5e1507e54668eb","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-08-01T19:42:10.901114Z","times_seen":5155,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/fserver/files/sportTeam/football/en13.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/en13.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=cd06424ba4cc39d1f90c88edc27d9720; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\netag: \"5bebb5ac-1d07\"\r\nexpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nlast-modified: Wed, 14 Nov 2018 05:42:04 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 7431\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7431,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"ccf9ba31a26171429bb1e679915f315e","sha1":"b2aa8bffd2f76c57858cd9d38dd53f4e4b00d62c","sha256":"48d81b76f95c842492d4d8e9389dafa257d68217b274765e40e3f1a8fb8ad0d9","sha512":"2a479ad5713b80deab71341e8b52e2a237c5478817ee4e3f54a70f63be54807af0b81cd79d69c57f5ba39116ec5d10ae492cd624cac41a98f67721d0f9ecbe41","ssdeep":"192:ADURItm3Rhqc6t5+vJb4vjJIt/4ezApKcAVaB4Oo:AYRCmhRRqjJc/4hbB4Oo","tlshash":"50e1aea50cf5934d4718d45f5324d24ad3eb02eea52aead3a0e13073667a50ef9ed888","first_seen":"2023-05-18T01:39:25Z","last_seen":"2026-03-04T19:51:58.92418Z","times_seen":627,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/style/common.css","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:50.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/style/common.css HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 29 Aug 2024 07:35:26 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66d024be-23371\"\r\nDate: Tue, 03 Feb 2026 09:42:03 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:03 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 21347\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 876708618802821195\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144241,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (498)","md5":"a31ffcda17c1d9b587413f2cb7609a8d","sha1":"9c9ae13ae2387fa25d1c569205b633fd2c56a0d8","sha256":"09a5945fefc25efee70ece4b4f3be323fde5f98413d70224db41a5d3d8ca014e","sha512":"435f8befc4c3d3263c16df93b45aa717ec8a3d36ff67cda51ff9abdd455b486996483f26fa483061333d6ea10b722672342f9431690e28ffb7750651b8e4ac50","ssdeep":"3072:DKdA3rq/eR/QWfcnldOsCpxD+n2WcGSmph2hA1s:DKy3rq/eR/QWfcnldOsCpxPWcGSmph2F","tlshash":"5fe3a619c0abe00ba357e397f9fd6bf546b88843e91707bcf2e6349d9547248123a2c5","first_seen":"2025-06-15T03:56:46.474373Z","last_seen":"2026-03-04T19:51:58.892801Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3475,"timings":{"blocked":1533,"dns":938,"connect":280,"send":0,"wait":313,"receive":91,"ssl":317},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/captcha/ppcregister.html?t=mmccauw8","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /captcha/ppcregister.html?t=mmccauw8 HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg;charset=UTF-8\r\ndate: Wed, 04 Mar 2026 17:57:57 GMT\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nout-line: gb-cdn-801\r\npragma: no-cache\r\nset-cookie: SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=; Domain=.jixiangfang.app; Path=/; HttpOnly\r\nsub-sys: msite\r\ntempsid: BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nuuid: 01377-01-00000000-177264707773b8\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1427\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1553,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x40, components 3","md5":"5a3c37302d4cb3dc7c6c8d6aa0a6a30c","sha1":"b765eef63a20156db5a3c0969620115f96204d7f","sha256":"bf513b1b5bb2eeba88b82af5f6267db9d98de12a1fe96ec7089760be1ff14954","sha512":"02b1b5f8b91d7608f7609b26628e727a678576dcd7f427330924ea1fabe815127f7bfce01261cb3a8369a1556d12bb6bbbccb4cf03deb1549b668767b7a6a2a5","ssdeep":"","tlshash":"c531b58ae7644100cf2386b9254b3067d0db89e37af021392d7081918da0cbae61ccad","first_seen":"2026-03-04T17:58:29.133932Z","last_seen":"2026-03-04T17:58:29.133932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":798,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/fserver/files/gb/1377/carousel/10038/1705340587590.png?wsSecret=54758a71f9a330122f35c10c0985db13\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1377/carousel/10038/1705340587590.png?wsSecret=54758a71f9a330122f35c10c0985db13\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 17:57:58 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nETag: \"65a56eae-4e3e1\"\r\nExpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nLast-Modified: Mon, 15 Jan 2024 17:43:10 GMT\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 320481\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15353099375945761089\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss, Cache Miss\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":320481,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 692 x 516, 8-bit/color RGBA, non-interlaced","md5":"6b6c963c0ef139057d6b5d4c75c6d588","sha1":"d91a4dd59f93ef7f659bd02c0765b841a0fd4763","sha256":"65e648600152d7d64d6dfa2ab4d395fc945332019b458ad0f1a572f1802ab2de","sha512":"9fb1d52dc4c1c557a3998100ce5d13577ba8eb91804c7c8edc9e846e31525964e60a98bac7a3fa76d759f10b2ed202fc8ab2ed4408c1f22dda612445b0aac4c4","ssdeep":"6144:zT2/Yeatxqp7Fn5QPNaxL941QvAxNh+Q+mU8JDe5yFxPnbQqFLH0:v2/Ytxm3QFax61QonDN0qF0","tlshash":"6864239a60f87ae5de377bcc65056b452adf054740704ee1ba83f128a2943bc132fb63","first_seen":"2025-06-15T03:56:46.469638Z","last_seen":"2026-03-04T19:51:58.915651Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":10425,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/themes/images/layer-dialog/gui-layer-close-bg.png","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/images/layer-dialog/gui-layer-close-bg.png HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://o1tyg6.pham.xin/ftl/commonPage/themes/gui-layer.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nEtag: \"5d848f4f-529\"\r\nDate: Tue, 03 Feb 2026 09:45:05 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:45:05 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 6782\r\nContent-Length: 1321\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11696990011539373962\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced","md5":"a2e938202c0287b9c82461a6fd94dee9","sha1":"b5e2adc7cb07c18a70a88af314e56b946ec1a1b6","sha256":"df9ce20db277ad8302c704a73aff5024683a0d38aff0d3e7e884a67a24439936","sha512":"2c035017e6ef6d6be24cf26972434ff7b16760ac6f5418d83652e745007a117cb79f4f9fa542cf4098b9141d4851f748c5151cb1055ea2b1f42eb70eb72a809f","ssdeep":"","tlshash":"1321830eea4368009648bdc114f3a457f7165f80acd8e2f46e8aac5d2d103f96abd6d7","first_seen":"2023-04-30T20:28:22Z","last_seen":"2026-06-07T07:30:11.522472Z","times_seen":16458,"resource_available":false,"data":null}},"time_used":1816,"timings":{"blocked":1567,"dns":0,"connect":0,"send":0,"wait":247,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/jquery/jquery.nicescroll.min.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery.nicescroll.min.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-fc8b\"\r\nDate: Wed, 18 Feb 2026 16:25:34 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 21 Feb 2026 16:25:34 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 1074\r\nContent-Length: 17446\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9842444121753611689\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":64651,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64577)","md5":"b5bc8cd626b389bde727a91e6ce79436","sha1":"3df6c39300ac286cf596b3bda273cb39ff825429","sha256":"a1eb48eeb3b3f2ba41940d3041464f0b386b7a7c4a8acb42f3017e691f4b116e","sha512":"2c1dde58ce83d9b716919dfc42602aef3022be012b3f92e61b17b674303ecbf0b9d308064b6d6c2443cf3e3dfd36bfb332eab62e64b56bef0be801e6f4610f12","ssdeep":"768:CwJl9VwAdGuMbJVAOi9ee9RjOEe1sdMv5rjITry:Cxb7AdRjOEKhHay","tlshash":"9553a7cd7522346b05de5235d18b4b4a623a9857730b90e4762c8cf46d29bbaf223f7c","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-09T23:49:55.267996Z","times_seen":18048,"resource_available":true,"data":null}},"time_used":2534,"timings":{"blocked":2249,"dns":0,"connect":0,"send":0,"wait":283,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/ftl/jxf1377/themes/images/tab-active-bg.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/tab-active-bg.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=169b5c290b6963ddbef067cfad367b83\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:57 GMT\r\netag: \"613c72b3-7bd\"\r\nexpires: Sat, 07 Mar 2026 17:57:57 GMT\r\nlast-modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1981\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 36, 8-bit/color RGBA, non-interlaced","md5":"7e676411644849bcc2ac27d5d4f0a37e","sha1":"eec03ea16ec24437ad3a14572ecf47cd84a61266","sha256":"fe695f48fc90aa259f262cf7603fa17e82cca43683725cfb2c6e05cb8f28e5f6","sha512":"045437df738321e65c7d8923547639fcdf21734cde8fd5d24967715554b5e09193a276b138d218746ce66f46944e93cbdb10a3123c3562ca4742060e59c5b663","ssdeep":"","tlshash":"6141ca09bc62d8502e4bde49a5f52113aa334bc46dc2b496fccd895f59300fe9a2c7e7","first_seen":"2025-01-02T07:34:08.420834Z","last_seen":"2026-03-04T19:51:58.906849Z","times_seen":4,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":656,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T17:57:49.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jixiangfang.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://jixiangfang.app:8989/\r\ncontent-length: 64\r\ndate: Wed, 04 Mar 2026 17:57:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":891862,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T17:57:23.859173Z","times_seen":17821759,"resource_available":true,"data":null}},"time_used":1122,"timings":{"blocked":458,"dns":50,"connect":202,"send":0,"wait":202,"receive":0,"ssl":207},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/themes/hb/css/pc.css","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/hb/css/pc.css HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-b5d\"\r\nDate: Sun, 22 Feb 2026 08:13:06 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 25 Feb 2026 08:13:06 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 50\r\nContent-Length: 911\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15834388237636050450\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2909,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1da71520b7a0a61526a8fa8d0feb40d1","sha1":"ba1bf69dad8783563328054cae58ccabf1b00829","sha256":"5eb4d895bcb33061cda238c8ff4985ede69a866819b980c732cf3802ec101e8d","sha512":"d1cb92160523c231c4942f27c018bd3b30f89fc60153e23eb0a49d0696c896b0904ebe5db7cb97a0686f656d04a58f3ccf8fc0f09f2be703fa8400bd3270dfa8","ssdeep":"","tlshash":"d451dd305a02b1aaf42ffa677420874c2537004373169b3e72fd7ad1cfca9696136ad4","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.287569Z","times_seen":17638,"resource_available":false,"data":null}},"time_used":2746,"timings":{"blocked":2432,"dns":0,"connect":0,"send":0,"wait":313,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/countUp/countUp.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/countUp/countUp.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-1be4\"\r\nDate: Tue, 03 Mar 2026 01:10:50 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 01:10:50 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 2080\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15247910571674339537\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7140,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3e9a58a52dd5597d17699c8d25c2841a","sha1":"26e032f2abad781cce71814bd6d43138db8f89be","sha256":"b14b3f362ef456b8ef3d9525e5fb6f88f04135a39551edeb88d840e220d012bd","sha512":"6e9cdf308f82ea204e7a97404532d4dfef4b6f1d7c4810d9cdd279112afabb1f982196691718306e21a72b5cb1aef66fc71d0f0546944942ae77b56adc7978e1","ssdeep":"192:a3+jBTUNKveiCoWsyItBF2qb2VAgCy9HLqNx:a3EEKpUo","tlshash":"ebe1db8a55b312212a137a6b9b8b33432a3f8633241dd8a97c7e13811f9542247d6ff8","first_seen":"2023-03-07T12:39:28Z","last_seen":"2026-08-09T18:46:10.42681Z","times_seen":2143,"resource_available":true,"data":null}},"time_used":2819,"timings":{"blocked":2477,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/img_icon2.png?wsSecret=7d97ccae31750f8a6cc575050860cef6\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/img_icon2.png?wsSecret=7d97ccae31750f8a6cc575050860cef6\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-20eb\"\r\nDate: Tue, 03 Feb 2026 14:37:15 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 14:37:15 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 151\r\nContent-Length: 8427\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16589124103826744746\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 100, 8-bit/color RGBA, non-interlaced","md5":"b8ac92f542441e594792a9727613e19f","sha1":"f787ddaffaf09e896e7f83ed89b6bc5c4ee8fcdc","sha256":"42795765a75620aae77b9b875df2002e888c9528b558d10196ebc5b04538843b","sha512":"9d66aa12c134cae581dc277aab5a5435108f4ac89fbb88096a637572d00607cc40d764bbc43fa72e61e9663a4856bd09a27816633c4538622a6cbc673ae3e820","ssdeep":"192:+SykknnTyHxdLzhUyxsmfoQbla8/6M7db3Y1bdEl57KbSPMC:henuXyUc66gV3Y1bdEltKGb","tlshash":"d502ae4efc824c15970df8a544ed125d273746e05fe1faa0be88e0a20c723940a8deed","first_seen":"2025-01-02T07:34:08.354658Z","last_seen":"2026-03-04T19:51:58.945008Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3945,"timings":{"blocked":3631,"dns":0,"connect":0,"send":0,"wait":313,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/fserver/files/gb/1377/carousel/10006/1598237491536.png?wsSecret=e9aafbe923a1fcabc4cbda416ee14118\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1377/carousel/10006/1598237491536.png?wsSecret=e9aafbe923a1fcabc4cbda416ee14118\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 05 Nov 2021 08:01:17 GMT\r\nEtag: \"6184e4cd-17325\"\r\nDate: Tue, 03 Feb 2026 14:37:29 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 14:37:29 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 150\r\nContent-Length: 95013\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10324047119967386508\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95013,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 692 x 516, 8-bit colormap, non-interlaced","md5":"5fef13e72fd0510e971296d086b9f6ae","sha1":"fef6b91cc4ca76ca8ff95280083acd3d6715f4b5","sha256":"1d4977a74174cd80d4c994cfda0db4cfcf6d5e88e4973448e3e3751c38eec712","sha512":"eff801537420accce1338e55711abc47ef1fd1c50f7b176c53bb5054ef124f3e836d53757b04f30657cb8bdda5a10e0315a39e830ee65e42d73245f615c7418c","ssdeep":"1536:9tUTQbbzRvKcMRxtHacXlfEV2CNadhWEMh9Sdf6548IpYFHjGRq00vTfh1EER9PI:9t1RvKh6ylfK2eadW4S54zpYFHjGIlvi","tlshash":"34930190d632d563401dea8a3b2a9f0ce63693e57e11a99f0e5d03970d6a20d83f77d3","first_seen":"2025-01-02T07:34:08.411827Z","last_seen":"2026-03-04T19:51:58.890181Z","times_seen":4,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/commonPage/lan/i18n.js?t=1772647070.494","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:50.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /commonPage/lan/i18n.js?t=1772647070.494 HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:50 GMT\r\nout-line: gb-cdn-801\r\nuuid: 01377-01-00000000-1772647070ba76\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1310,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1217)","md5":"ff854383e493539cb059d56622237e95","sha1":"00bc274fe2f66338284002ed07470601217c5739","sha256":"783e143f4f8c88d276978b4c9e2c7341976f0301952a5880b3782ed3ba22d6d6","sha512":"6835bcfab496eba7cb22e0a2542cf9644583aa759e578673ae4c3e7547b0db221a91377aee0c0a20ad9808971dbdd9f78490785074af460ba8bf1fa20e903243","ssdeep":"","tlshash":"b821ce68f7e462e32d6e8aa3ed663f6b11750abd00973507837831ce017dba79c6c408","first_seen":"2026-03-04T17:58:29.141889Z","last_seen":"2026-03-04T17:58:29.141889Z","times_seen":1,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/float.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/float.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 26 Aug 2021 07:50:18 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"612747ba-1b2f\"\r\nDate: Wed, 18 Feb 2026 21:21:19 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 21 Feb 2026 21:21:19 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 1929\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4217586008997379607\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6959,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"829af863b0cdc4a603919824ae046299","sha1":"1d417b1553e4ecb7125ebf2005b74255291fbf73","sha256":"1dbe4afbc9ed220c08b9e95577b56f83e2e8e0f7620c5dc18266bb325e5bb271","sha512":"e1202fa26fd353dfb2f989d3d45512e0691c062076297399f5fe62f63e7f5b194fec4a3d7fe2f09be1a6a945e197e7d68445d33dcc6f80b23a315112d9ae5b6c","ssdeep":"96:G4SXFXVXDL+R5NxuHie/moRUgIm/Kv3RKXg+Iw3qCNv5IC80b7Yr+HpH:G7xhDL+jNxzeBVLKJ1LeqCwCxb7YspH","tlshash":"04e1506e03b1212195aff1beaf1e424c6631905b2507dd057e0c87c46fa493c4636fee","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-09T12:20:42.489548Z","times_seen":17549,"resource_available":true,"data":null}},"time_used":1947,"timings":{"blocked":1655,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/trading_icno.png?wsSecret=bc42a124994825d34e92fdac9d6eca36\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/trading_icno.png?wsSecret=bc42a124994825d34e92fdac9d6eca36\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-e8f\"\r\nDate: Mon, 02 Mar 2026 12:24:32 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 05 Mar 2026 12:24:32 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 151\r\nContent-Length: 3727\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 975643656686287121\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"a63a7e997b7ff3b87473bf384a28480a","sha1":"85f1ceb61b217502ed30ea30d81ed3adc4cba8e1","sha256":"49216948705beadbfc7c2fcb91f539e932d86f47a02ba22aa92ac3c1f0825a97","sha512":"c387482ea9bdd4af7e0e0b606543529f16b235f11e5ad73e39bfa1ed97ae1ffce9e8634f76f627114e46e8acd5bc62c6f50649cb38d3a1de68bfe2f500da220d","ssdeep":"","tlshash":"36712b4ddc623da43009b7445ef6b3e32e2743846e49a911adc6ccbb4a105f69c1e9e6","first_seen":"2025-01-02T07:34:08.343987Z","last_seen":"2026-03-04T19:51:58.933945Z","times_seen":4,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/part-4-title_2.png?wsSecret=fdd9223fdf71faacc5abbf7203abf2a1\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.343Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ftl/jxf1377/images/part-4-title_2.png?wsSecret=fdd9223fdf71faacc5abbf7203abf2a1\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T17:57:23.859173Z","times_seen":17821759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/top/top_icon3.png?wsSecret=892991f68ad54fbf028b08bcda96be88\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/top/top_icon3.png?wsSecret=892991f68ad54fbf028b08bcda96be88\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-103\"\r\nDate: Fri, 06 Feb 2026 14:13:57 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 14:13:57 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 5101\r\nContent-Length: 259\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17739281284977204553\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":259,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 16, 8-bit/color RGBA, non-interlaced","md5":"853ba5a88e9ca5680f394dd78549f5e3","sha1":"a15787870b888386673b54274acd922ae2f1a4c4","sha256":"bd9e6fe3400ddad0652cbeb556ca08b98f5f097a40df9fd47ba0df2c159c9075","sha512":"5270d4c464422ee9bb2390a34c1a0bb5681d25264a214f02e759c7a6afd14a52c59e8127af28783039f76b7b075207c4843b01050606b132df2861a1a88e6f13","ssdeep":"","tlshash":"f2d02be345024a25f4017637ad9284a4dbb01a1c117405d9f1e0de371a0d73a0e5c001","first_seen":"2025-01-02T07:34:08.363127Z","last_seen":"2026-03-04T19:51:58.871573Z","times_seen":4,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/top/top_icon4.png?wsSecret=a648d5d6948b3c3e1ae37c792a7c768f\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/top/top_icon4.png?wsSecret=a648d5d6948b3c3e1ae37c792a7c768f\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-24a\"\r\nDate: Mon, 09 Feb 2026 06:01:06 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 12 Feb 2026 06:01:06 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 4398\r\nContent-Length: 586\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16656234697511885676\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 15, 8-bit/color RGBA, non-interlaced","md5":"a8f333b8a823a3436d4c0dc8bfb3890d","sha1":"24e08e86ae1fa9a448bb476b0f3b8b37cd6270e6","sha256":"6b59e98f18425bf398201eae29ad253011bab05a9282c3cef821de2ae67e8137","sha512":"bdf0bf0f96bf45bf12c6a8c54ea0b77f75a6e7d77f4bb9313626727580a02168e2b666712ebcd87a03396915c6f1fbea5c9a9c2dfc804ebc342aaff4ecd6f82d","ssdeep":"","tlshash":"42f096c7850238f947d620b25c4e6ce710bd93b464529dca2a1b28c7f74191c340331f","first_seen":"2025-01-02T07:34:08.364395Z","last_seen":"2026-03-04T19:51:58.945599Z","times_seen":4,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":521,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/notice/icon-news.png?wsSecret=abf9dad27bc92852be8e9d7a081a8036\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/notice/icon-news.png?wsSecret=abf9dad27bc92852be8e9d7a081a8036\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-214\"\r\nDate: Fri, 06 Feb 2026 04:39:06 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 04:39:06 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 296\r\nContent-Length: 532\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17234767211548540728\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":532,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 21, 8-bit/color RGBA, non-interlaced","md5":"c870ed5b4554c641479ef43893047b4c","sha1":"07b0bdf8b124de2070f5b98977c1ed6e3304ffee","sha256":"30a9e21423e8cf3d19f84a29f2be38e2f55a26154f938b5b0b4a35ad8539a948","sha512":"fa83dbb291204923833dc751f5495cfc6492fd028e8faab45c2ed1d227e42f317178d36a324b7840e8c117966823684465c27cbcfbb753e0127596e46d57b844","ssdeep":"","tlshash":"3af075202089ccf8d83055c385fa5736d0f1d3d9ee098b1bdb6b9da90805e95804935e","first_seen":"2025-01-02T07:34:08.37134Z","last_seen":"2026-03-04T19:51:58.909555Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1066,"timings":{"blocked":811,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/js/jquery/plugins/jquery.validate/jquery.validate.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 27 Aug 2024 03:30:00 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66cd4838-6caf\"\r\nDate: Thu, 19 Feb 2026 07:22:18 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sun, 22 Feb 2026 07:22:18 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 7746\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14831910850333178731\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27823,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27668)","md5":"9c41709c2b64126b909c101a27f39153","sha1":"4ab666b36c092577acb41390ad90e96d5fea7711","sha256":"c1963697eeafb63b6c29e95da2d38d91dd907ab656e130e6e1c34d1dcd149f60","sha512":"f235dccead15199e58495c6faee849c50252b9beed29a04ae46a7a9bdbccfd569a8ab452e7fcf923b7048dfda0c3d7bd51261874642d40e994d1640ca89e330e","ssdeep":"768:u4ygd0iB6d9zYDO5qYT8fwTW3Jny+XiKZNtrt2tG:NB0iB6d9zYDO5qYTMwTW3Jny+jrP","tlshash":"e6c2b7093585102f4ecf30fbb897524f72ba95a45019a069b5fca4d1bef9f8530a6f38","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.285255Z","times_seen":17838,"resource_available":true,"data":null}},"time_used":2559,"timings":{"blocked":2263,"dns":0,"connect":0,"send":0,"wait":295,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/img_icon1.png?wsSecret=65ab72eca558e60e8c929de060cf03f2\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/img_icon1.png?wsSecret=65ab72eca558e60e8c929de060cf03f2\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-252d\"\r\nDate: Tue, 03 Feb 2026 12:43:40 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 12:43:40 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 149\r\nContent-Length: 9517\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16595932663041705519\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 100, 8-bit/color RGBA, non-interlaced","md5":"921d3eb8aba8ceea9678a0ca69cec3a0","sha1":"4b688fa904229e869458c52476909dc0257964a1","sha256":"5900ae7b0fea878d5ded81d60aa50f6cd5f0f58aca5b2c0f1baabcd78c7abf86","sha512":"d562366df813c7b8ac61bba7c0ef1410285720468b15f23bc6c65a0f263dc4afd801fbc11bca6a4f00794dd44333f78e1f2f2178029f30f6533c154805afb067","ssdeep":"192:+SykknnyzHifVStMZ+Gk4jJzQ59Y8GSXEE683FOSJ93cs76lHK+R6:hen06SqF9E28iL8VOmMLqi6","tlshash":"a312bf2634340e269a6f5de2237826ba79632310559358dc7ccc64df9a354fbcf0e5c6","first_seen":"2025-01-02T07:34:08.352902Z","last_seen":"2026-03-04T19:51:58.921168Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1647,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/ftl/jxf1377/themes/images/partner-hongtu-silver.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/partner-hongtu-silver.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:57 GMT\r\netag: \"613c72b3-29a91\"\r\nexpires: Sat, 07 Mar 2026 17:57:57 GMT\r\nlast-modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 170641\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":170641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3720 x 72, 8-bit/color RGBA, non-interlaced","md5":"f1fbb9ec7af0050dfaed0f05757a2efe","sha1":"b88a486281ec62f86050cf90a0d3452df8b63dbe","sha256":"bfef37626a87d42dcd8a0315030203b94f3d49f4e7f0e9f38dc08c3398fd1345","sha512":"943b7a22291ca4409fe5a528cf936f3e7de28a9e909b7f35441d09d376ccccda2dddb99a3acaac53c00cda9f59cf24f1b7b6ad3bb69038e26d6c3bc788c59727","ssdeep":"3072:uRlgrwlELPC7OADA2u+SHZRw9SLp6JFhYsDlf0sQeuq2fMOXjMmg27H8:uRmrwlsPCvIN5HLEBbDlf2eIJXImg27c","tlshash":"71f3023925b688669e8660362f00ac008dfb93479750cb503ded4a519f34f5b7dcfdaa","first_seen":"2025-01-02T07:34:08.423881Z","last_seen":"2026-03-04T19:51:58.888152Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1018,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":813,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/mobile-api/v5/origin/getThirdParam.html","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /mobile-api/v5/origin/getThirdParam.html HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=1a7ad16788516453862c0c43d835029d; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: mobile\r\nuuid: 01377-01-00000000-1772647078d816\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 86\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"9ac55fe189e4f53f37156e563e0f542e","sha1":"18b13b1360ce9fbd973e046d2652be38d58a15e0","sha256":"d7e02321006e1520d4c3e8d26428462419388e022cc89f3c974d0b87ad83af7b","sha512":"45b140d1bb3f3f06ff883448128956edda4d8ae0820dbb6b10f13860896cd611921dadb5b11b8d1577f22a80aefdfdbf8a2d54f6076b1e05f69d262df93b94f0","ssdeep":"","tlshash":"12b012816118adb39f0317e120ec380142fc11d180d48408dc5c8e5847948d7a202933","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.50515Z","times_seen":15881,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/fserver/files/gb/1377/carousel/10010/1598237734962.png?wsSecret=fa4d09e51325a36fde8682c71077d91f\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:58:07.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1377/carousel/10010/1598237734962.png?wsSecret=fa4d09e51325a36fde8682c71077d91f\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 22 Nov 2022 18:25:16 GMT\r\nEtag: \"637d140c-673fd\"\r\nDate: Fri, 06 Feb 2026 07:12:01 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Mon, 09 Feb 2026 07:12:01 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 154\r\nContent-Length: 422909\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 6137770815421955244\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":422909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 580, 8-bit colormap, non-interlaced","md5":"e6b6c91a589575c9be1f46e6e410aca4","sha1":"be30a8749d380758a0854343ebe90884c681e355","sha256":"e7400ef768502370fc450da6dcc20585cdeb252290acecaba7716e1ce9bbca17","sha512":"d65377033425414044439145119d7cc05da874d718de59e4a65fefc5d48b462d0dbd4232c3dd12c438f17d5b3f46d703fb4ace4520164477777d51ec29883b40","ssdeep":"6144:NddWZznVyGMFtPX+4mOdqXXHGAqPU3/ZHTARF3EQq+ZT33Rce0D3:NHWxoGmI4mZgPURHTCqwKrD3","tlshash":"4d9423ce2dc765620391f8ea511f91de2f1b1a92b88b55ae58c048e73049dde3c6e732","first_seen":"2025-01-02T07:34:08.447446Z","last_seen":"2026-03-04T17:58:29.150613Z","times_seen":2,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/style/animate.css","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:50.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/style/animate.css HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 12 Oct 2021 08:15:06 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6165440a-10ca6\"\r\nDate: Tue, 03 Feb 2026 09:42:04 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:04 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 4804\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8144699255637966709\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68774,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fcf65a398380ba155b92d28e9a98541f","sha1":"94700220506d92dbce45cd3630cafbbf15245010","sha256":"1536c9f5bb93729598dfbf692c112bf3a0ba8c210dcf985f93b4f86b34cbf366","sha512":"80661b3e13145d08d297579633a6720bcd9b4934d8d7bc8b9f782f3405647fed5be5eafbba45410cb687ff48079b1fb52b88bd762f27d83c52de075b00bc79c6","ssdeep":"192:AFwf2T/awfDZUiduG+MONjPscYODkcWFFLbimZbHMxymDSVbyPiVEzfukrWL7XUU:ADUy5","tlshash":"a563f96929a1114466370a15c7df9f78263ce5a31826ecfeb3d2588b8f11fac23cd617","first_seen":"2023-06-05T08:38:02Z","last_seen":"2026-07-04T10:45:42.011635Z","times_seen":32,"resource_available":false,"data":null}},"time_used":3431,"timings":{"blocked":1546,"dns":937,"connect":299,"send":0,"wait":321,"receive":9,"ssl":316},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/fserver/files/gb/1377/Logo/1/1598236992826.png?wsSecret=d923fc0ce71e15508137fd632218a72f\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1377/Logo/1/1598236992826.png?wsSecret=d923fc0ce71e15508137fd632218a72f\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 24 Aug 2020 01:30:41 GMT\r\nEtag: \"5f431841-ec66\"\r\nDate: Fri, 06 Feb 2026 14:13:51 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Mon, 09 Feb 2026 14:13:51 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 48\r\nContent-Length: 60518\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2057519262517366989\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60518,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 422 x 125, 8-bit/color RGBA, non-interlaced","md5":"83d0d4efc651a0892720b6fbcebc0647","sha1":"2bfef20f75ebf0cc766dae11dde59ec861439722","sha256":"2added1f6d670823f029d0a4ddccbb86589e073bc5702f0f5176b2ee4986ee9a","sha512":"8bf1050d3e68c174f4195a52bde449a19617f8d8ccb898ece888d25cee1f6c3b9dce3212872a51724b5a030ff0b70b73646d58919163b8a10b23458a81fd0f4a","ssdeep":"1536:vEPpZWmD8MVRc7sUzv3TC6TGidMB0UYer:sRZWmBq7sUzv/CidMB2er","tlshash":"7543d0a5bef172d181425133a8cab4184d368393e2816c91bdeffa1b5f207f54c5bb86","first_seen":"2025-01-02T07:34:08.460994Z","last_seen":"2026-03-04T19:51:58.891246Z","times_seen":4,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/top/top_icon1.png?wsSecret=c1089c15f5c55babd34213dd8a7b11cb\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/top/top_icon1.png?wsSecret=c1089c15f5c55babd34213dd8a7b11cb\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-2ce\"\r\nDate: Fri, 06 Feb 2026 04:39:07 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 04:39:07 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 347\r\nContent-Length: 718\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17732851397959810021\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":718,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 27 x 24, 8-bit/color RGBA, non-interlaced","md5":"7ff893206cf08d186d3d923bbb876eb6","sha1":"006950490c78e5a30608f220724b70daaf7bfcdb","sha256":"74d7d2935a02cf58f731337f3af5eac5ac1f760bea6f91d2277414182d3acf04","sha512":"65fe48ba56fe12002b1762702771b05ff43e4ba80d1eb08be4c2424ab37c701e783cd5d4fd064eded091b1f2e985446a94ac1e75994e3abb2690f1f14be84fba","ssdeep":"","tlshash":"4d014971e1d6c871f5e74e7227120850d7ebf04831172d18a2cd72755bd302755417f9","first_seen":"2025-01-02T07:34:08.361759Z","last_seen":"2026-03-04T19:51:58.887693Z","times_seen":4,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":477,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/images/favicon/favicon_1377.png?wsSecret=4a8b51e1e7ea05ab5f989fe20690c5f0\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:58:00.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/images/favicon/favicon_1377.png?wsSecret=4a8b51e1e7ea05ab5f989fe20690c5f0\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 02 Sep 2022 09:55:12 GMT\r\nEtag: \"6311d300-950\"\r\nDate: Fri, 06 Feb 2026 04:39:16 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 04:39:16 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 148\r\nContent-Length: 2384\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8118073250372277050\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2384,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"57d4f91cea1b676d25dfa664733e11e4","sha1":"c9bafed7d93988a3cc03e376971b90e6c8115807","sha256":"df4f062df30de1f5880cc18a5c994b99a3b6c93104444bc7d9b0df07d5a87d14","sha512":"d6632669be694b54f30ddfa72dfe0af12e77062106057e97452a14b6bc8723d56bea95f9aa335ec146d8a4b9e0ac4e2deb17744ca0784ae451f42c12c2a50369","ssdeep":"","tlshash":"4741c70af882ac41161af54529d590937f234dd08a81a882fccdcc974c701fbdd4dbd7","first_seen":"2025-01-02T07:34:08.40411Z","last_seen":"2026-03-04T19:51:58.925724Z","times_seen":4,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/index/getAppsUrl.html?device=sportsApp\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:55.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=sportsApp\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:55 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 01377-01-00000000-17726470755afe\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 916\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1156,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"4a7a54a2be58213ca11a8dd0ef83edd1","sha1":"53a1dfac83eeec2c6c82f94a7041632e5bdbc70e","sha256":"06405a75cf6cce3e0955dc4b3de1c64f8636959852f9c08bfece09e1663bde49","sha512":"7a665d7a17f57f1580ff5a980dd86f1e3edc718658a17ed03b8cbd580b618cfffcfee8645955516f0e5ac9067cf8d4c2f7fda485258fc946693451dd9d06f489","ssdeep":"","tlshash":"f8210ac6c891a86931f161c487af55202cfd1fb0143211507fe819042cce28ef44cd71","first_seen":"2026-03-04T17:58:29.075886Z","last_seen":"2026-03-04T19:51:58.890742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/fserver/files/gb/627/sportTeam/1/1660343073654.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /fserver/files/gb/627/sportTeam/1/1660343073654.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=cd06424ba4cc39d1f90c88edc27d9720; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\netag: \"62f6d321-c7ff\"\r\nexpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nlast-modified: Fri, 12 Aug 2022 22:24:33 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 51199\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51199,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 350, 8-bit/color RGBA, non-interlaced","md5":"0fa99ddd5bc86004e7675f8cb53f56b3","sha1":"1a18e0d2259f333ccba89bb57864a5583dc4fc76","sha256":"ce5efb2ff7ae01b34f3415668239d4e8207dc93746108275d14450aa64c27ac2","sha512":"59a00110bf1140af70bc85768410d3383d12c175ada4ed58f3efcc700d5054965cd0259681e8130877ed5a9dfaed45ff8a4bcf11fb1e476599b95abedf42495b","ssdeep":"768:g352uAggZRa0dGRem4eF64TAIb+aKrNOFi91MrbWalPskT4X4SHoXsXWfPAZho:3uAggxdGR7RAIONA9vHPskTUHrX5Zho","tlshash":"6e3302663454903e1becae2b69980d20a60e373dcf4f799979a09ce416b43236f34e75","first_seen":"2023-05-15T01:22:15Z","last_seen":"2026-05-01T19:32:21.658729Z","times_seen":360,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/js/gamebox/common/jquery.validate.extend.msites.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 27 Aug 2024 03:30:00 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"66cd4838-3a09\"\r\nDate: Thu, 19 Feb 2026 00:30:06 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sun, 22 Feb 2026 00:30:06 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 4126\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16808817106623703398\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14857,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14855), with no line terminators","md5":"4fe7dadf050dad2dcfd386d21b880281","sha1":"07e7feb8dc9309fe66d86d7a9e27f8efd32ab0bd","sha256":"aa891aafe8e98e1e15d81b2b116e6c3808d0bbbec56cd24818e2e7ac911877c9","sha512":"9da40e5132ece9fe346f27aa467b2496545c84197131c633e5b1ff1f641ece723440ec0289e82d7948b85bcd901b9e3eb6e36f8e0339ae05e4a32621e895accf","ssdeep":"384:yC+tJn9Dbvbf1P3QSBxDrdiewZnnoTW39if+04xSlR4nbiamdrjNfrzInGINYlor:NWJnlN3QSBxDMewZnnoTW39L0MSR4biK","tlshash":"a762954d3a9514bb4adf31b770ab204f767e8800852c91c4bdbca0d166b5ee072e7e6d","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-09T23:49:55.275365Z","times_seen":17908,"resource_available":true,"data":null}},"time_used":2612,"timings":{"blocked":2293,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/browser_bg.png?wsSecret=bc1e8b2fa1293bf181b096f62ba7628f\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/browser_bg.png?wsSecret=bc1e8b2fa1293bf181b096f62ba7628f\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-b0f\"\r\nDate: Fri, 06 Feb 2026 04:39:06 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 04:39:06 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 151\r\nContent-Length: 2831\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4497019956162852414\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2831,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 102 x 137, 8-bit colormap, non-interlaced","md5":"8e2d24f46e422da6088365076a29b611","sha1":"8a3c80578ecad69d779d198e970c72b2a9814a3a","sha256":"348bc9514ad79fe984fdc94e1d6a016f1a88279c5bcface38d0e4fc8ef0995fd","sha512":"786629a4b215326ca829a391d7ee7de72ec98119723de928c030b8e340aecfc8a4ddaeaed5fe86da3e9da48382c15a2c834f00636b60989183eae0a988f681ea","ssdeep":"","tlshash":"c1514b548be4e8028016d967d87ea6328864ed4ec4cfa06d1490b54a31fb78e068b3b9","first_seen":"2025-01-02T07:34:08.360228Z","last_seen":"2026-03-04T19:51:58.941906Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2530,"timings":{"blocked":2282,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/fserver/files/sportTeam/football/en24.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/en24.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=cd06424ba4cc39d1f90c88edc27d9720; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\netag: \"5beb969c-104a\"\r\nexpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nlast-modified: Wed, 14 Nov 2018 03:29:32 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 4170\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4170,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"bb640d7a008128f4cb1b84f6f80df9b5","sha1":"080b45ebad7fc3190388fe227e4719bdf71ff76d","sha256":"62b59a1fcb4b06930ac667565e8efa50ee107063d2450386130e9645b6ba2d9a","sha512":"98e151e26b2813acb740258a6232d75e81cad351efc99bb4d48cb55f282ef4cca9288db4905007b2717b3ac41ba5d14e26e9d1c37253b6e9c4b6b0bbb3b0a473","ssdeep":"96:EOHE6tcOp2Jl92ZfeUMre5d18QkfbbVAkHbjPSRZJEScGw:bk62Op2AHMa31ObxvHbjGPFcGw","tlshash":"11816bd921ae0329d08a058978120573d7757d97a3cc64da8333fa9f88b19a4defc8b5","first_seen":"2023-05-15T01:22:15Z","last_seen":"2026-03-04T19:51:58.912492Z","times_seen":426,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/style/bootstrap-dialog.min.css","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:50.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/style/bootstrap-dialog.min.css HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 12 Oct 2021 08:15:06 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6165440a-8a4\"\r\nDate: Tue, 03 Feb 2026 09:42:04 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:04 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 308\r\nContent-Length: 582\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10825418563907138231\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2212,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2212), with no line terminators","md5":"b96ac75a57b19d9c167a3a1c8576b53d","sha1":"7efedd5b5277d951393af4783e9da20fc5376152","sha256":"3fcfb5edb031a13551fb7630852d5a1b474339bfb2c8ac97e9596e9e798a7815","sha512":"582fb4f85b59c4ae61b0f29f2e234b3709a27691b41b8b97c406e58b995e288e518a4fbe39be4e35d539c2dda4f6f46dbcfa8150ff89945ca381ed20d57ef135","ssdeep":"","tlshash":"2d415b1d0b9f009ae06b09da71fe6e1164947b61d4a0079e63ef336d8bc309735b7312","first_seen":"2023-04-09T13:08:18Z","last_seen":"2026-08-09T18:46:10.411243Z","times_seen":2418,"resource_available":false,"data":null}},"time_used":3343,"timings":{"blocked":1520,"dns":938,"connect":291,"send":0,"wait":295,"receive":1,"ssl":296},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/fishing_person.png?wsSecret=f9e6fd68899ea3e06564f63374d7252d\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/fishing_person.png?wsSecret=f9e6fd68899ea3e06564f63374d7252d\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-12492\"\r\nDate: Fri, 06 Feb 2026 07:12:15 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:12:15 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 131\r\nContent-Length: 74898\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11279724709710798288\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74898,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 671 x 740, 8-bit colormap, non-interlaced","md5":"eb0ac79db2092a8f07dd6452fd39f876","sha1":"f3e15c811522c4e027866dc1d228cef11b43ab66","sha256":"ea0230f0fc875b26bf9eecb30e9f3aea9fe4f1da487a105bf396faf1af55e30c","sha512":"b270d195086ef186d6f049cb925ddcdcb2670e8746bbf48e82231e5a1e980f9de55635c7dc483668c12aa898262cd5bebc142b1e1496bf529e02309ffe655a94","ssdeep":"1536:f7hQyd5EXadDM1JLxUa8T+mN2qYekQKmC9UQzmQPegSom8fIVGN1vPx:jyKdDQJL6TUqEQ9QzRG9om8fIYHZ","tlshash":"1173010c258db09bfa5ac8f8270174fdfec2a9324d6114ea0f5d5a0b3e539d41bec259","first_seen":"2025-01-02T07:34:08.390981Z","last_seen":"2026-03-04T19:51:58.884553Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3580,"timings":{"blocked":3273,"dns":0,"connect":0,"send":0,"wait":291,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/mobile-api/v5/origin/loginSwitchCheck.html","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /mobile-api/v5/origin/loginSwitchCheck.html HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:57 GMT\r\nout-line: gb-cdn-801\r\nset-cookie: route=1a7ad16788516453862c0c43d835029d; Path=/\r\nsub-sys: mobile\r\nuuid: 01377-01-00000000-17726470778b68\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"1452cebf3e2bb129b06762f43f09e5c8","sha1":"0ec65f1e79233e8c59f76c55fb89ac8637cfb070","sha256":"99a31cd18b8ce37d3725d0a77d5e314452d2906ed2b54b8b19d4de849d1bf13d","sha512":"758e5238156c2ffef164019c0090d96ae3567b56cdb9180b179f9f20dbefa3d184a9b0776e96d10667ecc0bef04ebccad0959b1eecbf5526077c096e22cfe919","ssdeep":"","tlshash":"b6c08c49f00458abce02239456d828402fec189270c9eccddc0c4a58f2cb4dfe322c2b","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-06-07T07:30:11.558795Z","times_seen":15814,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":871,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/ftl/jxf1377/themes/images/notice/notice_bg.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/notice/notice_bg.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=169b5c290b6963ddbef067cfad367b83\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:57 GMT\r\netag: \"613c72b3-13dd\"\r\nexpires: Sat, 07 Mar 2026 17:57:57 GMT\r\nlast-modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 5085\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5085,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 45, 8-bit/color RGBA, non-interlaced","md5":"4202038a683ab753938723cd8c99e5cd","sha1":"dea5386a5ae6524b591314de471d7ba488e1f9f5","sha256":"42bd21d5132ce372fdeb1bcba1c18e8c97e1e4360fb432248aaa07c2df9d6c7b","sha512":"5a48b43ca4af4e926e0ea8b0da085009573b0bcf48aed8dec6c46fefa2007b6b98be6c86202a6635383393bb667c9ab7c6ee27bba9e4d836ea0e32b4d2406a9d","ssdeep":"96:pS5YkknmWIYJvb/NHnHPHcsAdsEQkuGlkm4dMjEnYV06iG7jG3K5vDp:pSCkknnvJHHPTAdJNmm4dbF5GXhNV","tlshash":"20a12817ee60e980140bd60c29f43dd66ab35af0d081dcc1b8d9856348711be1c9c6db","first_seen":"2025-01-02T07:34:08.425879Z","last_seen":"2026-03-04T19:51:58.892355Z","times_seen":4,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":658,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/sport_text.png?wsSecret=d81d92fa80d34c11336e38bfe798e8f9\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/sport_text.png?wsSecret=d81d92fa80d34c11336e38bfe798e8f9\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-65ea\"\r\nDate: Sat, 28 Feb 2026 08:19:31 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Tue, 03 Mar 2026 08:19:31 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 149\r\nContent-Length: 26090\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14823611501322224143\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 536 x 740, 8-bit/color RGBA, non-interlaced","md5":"d7e07abe12773ff07cd20c423eb18048","sha1":"cbf2d5f77d785f41dbd81da43ff16c46413acbb5","sha256":"6532d72ec299ff23feb134f62822b212edd471bb86753533ee167e0a16809987","sha512":"0cd1077b84e65a80df565e10101c5d2303a212b5744c4a0e7fbb0cdf3b150fa3c5f47281c8e713f35259e14a94209e34164393b17733352c05f07ad399d754aa","ssdeep":"768:KP0wdE2RDMIAypwXs6y9XmjYz9VXWxGooN1dYH1P1iQOXg:KP0QHRoEwXs6y8jYz9VGDoNf+1P1iQ+g","tlshash":"04c2e039eb18e810d89ca519f4f4860360d38d6c82407eedecde195399d1067e5357fd","first_seen":"2025-01-02T07:34:08.382844Z","last_seen":"2026-03-04T19:51:58.922502Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2589,"timings":{"blocked":2340,"dns":0,"connect":0,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/fserver/files/sportTeam/football/nba18.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/nba18.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=1a7ad16788516453862c0c43d835029d; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\netag: \"5c08ff9c-39fe\"\r\nexpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nlast-modified: Thu, 06 Dec 2018 10:53:16 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 14846\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14846,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"da67a96b326ff89cd5bc65a2f671f7aa","sha1":"f81e2ed7341c60a4b6c1f4d6a28ece90033e4bf4","sha256":"35fde805b75f07e73dc9b3893315422a366b95cdcf1699a3d04c7caa06ce1835","sha512":"e2e3f4c092dadfd601f257be99995beef3156e57aa3df7230e82344d57db46d8a9f9eda3e9e917a65db0264290803b51ba67caa630760bc8702bd8c03089f71f","ssdeep":"384:LEB1YVsIm/k4yhV6kUN7FLjoQRVcWSrtFZ2/:LG2V3mGhUfVF/oxFrta","tlshash":"5a62c191171dcbb15a3800f967477821d1398c4b6c625a8e999b3c2169a3ae0fff560f","first_seen":"2023-07-05T01:04:29Z","last_seen":"2026-03-04T19:51:58.924854Z","times_seen":277,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/zh_CN/mobileTopic/images/special_3.jpg HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T17:57:23.859173Z","times_seen":17821759,"resource_available":true,"data":null}},"time_used":2704,"timings":{"blocked":2704,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/part-4-title.png?wsSecret=7f19a83e0fdab30755027b2a92bee1cd\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/part-4-title.png?wsSecret=7f19a83e0fdab30755027b2a92bee1cd\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-1459\"\r\nDate: Thu, 26 Feb 2026 20:08:51 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sun, 01 Mar 2026 20:08:51 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 148\r\nContent-Length: 5209\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8062319516414387404\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 175 x 46, 8-bit/color RGBA, non-interlaced","md5":"af1bf20a23598ff245384929da36df3f","sha1":"e2f099b8684fc8db09b1fe2ca9861085c4ba651d","sha256":"b2d84ac0c922eafc247e7b0599837c12c96c2e4b2c041fc80746fa33b1debb1f","sha512":"d11f83cffe9aac2c6126da6ac9bd224a89cee779eb0ca8b9346bd7f4dfb0f1891e3424d891a08091ff9a2a19af9581e2d3efac1b1ad316ef271bec11d27209e8","ssdeep":"96:1SJYkknmWIYJsO/LPiHns2v7VX3h7Kyd0XAPEM8n9D1LnB0/8xYYQMO3Pz7rHjYv:1SykknnsmPiH/v7h3h7KydYAcM8nhxnP","tlshash":"a9b16e24589a681d4f48f94dace46123835f874da99072b1ec9cc0b3d87c6f6ae4c483","first_seen":"2025-01-02T07:34:08.358122Z","last_seen":"2026-03-04T19:51:58.919708Z","times_seen":4,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/index/getAppsUrl.html?device=android\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:53.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=android\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:54 GMT\r\nout-line: gb-cdn-801\r\nset-cookie: route=a1a97600d4111120168c5ba2bb9e992f; Path=/\r\nsub-sys: msite\r\nuuid: 01377-01-00000000-1772647074e378\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 916\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1156,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"4a7a54a2be58213ca11a8dd0ef83edd1","sha1":"53a1dfac83eeec2c6c82f94a7041632e5bdbc70e","sha256":"06405a75cf6cce3e0955dc4b3de1c64f8636959852f9c08bfece09e1663bde49","sha512":"7a665d7a17f57f1580ff5a980dd86f1e3edc718658a17ed03b8cbd580b618cfffcfee8645955516f0e5ac9067cf8d4c2f7fda485258fc946693451dd9d06f489","ssdeep":"","tlshash":"f8210ac6c891a86931f161c487af55202cfd1fb0143211507fe819042cce28ef44cd71","first_seen":"2026-03-04T17:58:29.075886Z","last_seen":"2026-03-04T19:51:58.890742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/options_bg.png?wsSecret=a84a1af8f67d30a959a6eb1bf8532ea5\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/options_bg.png?wsSecret=a84a1af8f67d30a959a6eb1bf8532ea5\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-885\"\r\nDate: Mon, 02 Mar 2026 12:24:29 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 05 Mar 2026 12:24:29 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 152\r\nContent-Length: 2181\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11678500726534927893\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 90, 8-bit/color RGBA, non-interlaced","md5":"a7d8ebaeac534d52c69185a82c5f9456","sha1":"e388527dd7419625e034059d979727db6005be3f","sha256":"6f9cf0a61eeb0cf68f91939e034f6783646caaec999de8788181671a2c7a28da","sha512":"a6ddd5f6362e4516f99ca6b80224f26707cf93316eecd7d9a9f15f0dc4b9ecd05d89150057f270e84d6690493d0135117fff92b2a790a9081ee605f599e019d3","ssdeep":"","tlshash":"2441a795f8b4eca54287f1992ce123037a2385d0ab42f196fcdcc85b08f19f5d5487d2","first_seen":"2025-01-02T07:34:08.375596Z","last_seen":"2026-03-04T19:51:58.880426Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2540,"timings":{"blocked":2227,"dns":0,"connect":0,"send":0,"wait":312,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/jquery/jquery.super-marquee.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/jquery/jquery.super-marquee.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-1151\"\r\nDate: Mon, 09 Feb 2026 22:25:43 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Thu, 12 Feb 2026 22:25:43 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 308\r\nContent-Length: 1421\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3614352956077172585\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4433,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4433), with no line terminators","md5":"f77d83590bc0a69298f2fbcc5d9911cd","sha1":"1d6aa25d7052f53ad0181385e5efe72f224bbdb9","sha256":"1d042b9441e860ddcc01b9e9e5e8d354121ee0e31b47f6e18a321e2e633d22e7","sha512":"a39dc6c01df32c8f72842af346f4d67e1278d37a74a0541537b8274b421bcfbc547a2f4844f3c4b6c5cdda4c78f0a8f41171c87ffd149ab52526a95bc6c5bf61","ssdeep":"96:nwzrUsI9/8w/ISEgOGXFRNcrc8PQjc3Pb:+rUsk88OnJQA3D","tlshash":"2991252d7290f5d559cf3c3be02b0b050c785123a54e00927a65def279ba379a607e1f","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-09T23:49:55.274536Z","times_seen":17916,"resource_available":true,"data":null}},"time_used":2484,"timings":{"blocked":2208,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/img_app1.png?wsSecret=ddadd4d7578d42500dbbdcd69fb820b9\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/img_app1.png?wsSecret=ddadd4d7578d42500dbbdcd69fb820b9\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-2a87e\"\r\nDate: Fri, 06 Feb 2026 07:11:52 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:11:52 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 153\r\nContent-Length: 174206\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13812986542225388382\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 527, 8-bit/color RGBA, non-interlaced","md5":"aa7937b4ba72bc1cc5eea1e8d14e7986","sha1":"7820f33e91cd068d8e142b0d76cee20ce99bdf36","sha256":"1c33fd44bfa84073c7af0a763021cf9f1231813504b41aba45b8e1dc356b6ed0","sha512":"fd3ac60cfd4d7cec9dd9bad015d02a8d039ab1054c3b044104e404a3f6b1665de6882c3941f90da92920d8850cb83f74dd8b09d431b98a96bb6adce3635927f4","ssdeep":"3072:+VlAQLF3ypEMiQarPmniSeDfwu9Q9ZrmKEAIYRYswuoVL30QAwcLnegPnqLr4gN:E5hFwuP4i9H63rmKoYm6sdJcLFqLsI","tlshash":"12041237e5366e4ca1febd05ff109645095ae248ac33a18159fd95e6fff026e38282c1","first_seen":"2025-01-02T07:34:08.393923Z","last_seen":"2026-03-04T19:51:58.882002Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2919,"timings":{"blocked":2528,"dns":0,"connect":0,"send":0,"wait":313,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/themes/carousel.css","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:50.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/themes/carousel.css HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-1238\"\r\nDate: Tue, 03 Feb 2026 09:42:04 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 09:42:04 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 1172\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1492303750281648368\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4664,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (446)","md5":"12807d0fd537748ae8b9f3b2c1b081fe","sha1":"bfdb5c7b814b9230deeb32d11e7310da35060a69","sha256":"88ccca89e9a16d20b3096d7b520be9f6b17bded7ab90b467f0599544de5b4c8c","sha512":"4a1ae92c86e7d4f6aa22a9ac83293718b3bb28f94699004aceeb89531092df4dd0bc46a86d1b8035e09ac55d2ec96b31ac7dde861ed55d1a392c5244f869854e","ssdeep":"48:+omNj5FDvdMNJc8hZuG0F6mee5kP6B5PP6B5466f5k5c5P5c5Yr7QIq62lpcIOgu:6xeDcqELTKEBhkGYDkjjkCKzQJ2i","tlshash":"e7a1ed34361536a6e9278325a1c5636cf11cfa52dbc31dafa1bb391dcf92499101fb0d","first_seen":"2025-05-22T12:43:01.053538Z","last_seen":"2026-05-23T08:38:57.902331Z","times_seen":8,"resource_available":false,"data":null}},"time_used":3456,"timings":{"blocked":1555,"dns":937,"connect":311,"send":0,"wait":334,"receive":1,"ssl":315},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/websocket/Comet.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/websocket/Comet.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 19 Jul 2021 23:50:13 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"60f60fb5-43bc\"\r\nDate: Sun, 08 Feb 2026 13:31:32 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Wed, 11 Feb 2026 13:31:32 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 4031\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4531715080109656453\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17340,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1008fe6a5e1a182d7775963b85405bb2","sha1":"e174a7b08cc3cb5545af1cd33d2814e604119392","sha256":"7479f6f22194ac37dd6d3f5a579b4682ac8dcb6389fb961cf4140f3fcc707a20","sha512":"26e07821ee1e8e94c4bada028e049df7572cac06f2e8dae958baa7a011eb201a6a1d4ed0cfa15017a3f52a0cb949343de0b33ca6da7c245f763c86d5adfb0223","ssdeep":"192:4Pf+aTbLSru4NyRs8VDv1KygOdWuTyVC3d7QPXLHOm8cSCl1Ej7bY8l7YJIJvO5N:4Pf+aTbe4M2cXzsjDUfj","tlshash":"ab721e4a2cf76086552732b90f5f64543235a8172605e91c7dcca6e08f98b7c1babff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.27003Z","times_seen":17668,"resource_available":true,"data":null}},"time_used":2037,"timings":{"blocked":1706,"dns":0,"connect":0,"send":0,"wait":330,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/commonPage/js/bootstrap-dialog.min.js","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/commonPage/js/bootstrap-dialog.min.js HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Fri, 20 Sep 2019 08:35:27 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"5d848f4f-4ea4\"\r\nDate: Tue, 03 Mar 2026 05:06:09 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 05:06:09 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 345\r\nContent-Length: 5007\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9088944389201428635\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20132,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20132), with no line terminators","md5":"5ce8851dc823429a42ab6147554403cc","sha1":"28f381f0e0aa4f5d56690e65723bd97fb59a38e6","sha256":"dd1edf5e54071903c4c1e81e33636444899d645df6b18bad22249da07f91c811","sha512":"f42a4d48c666d9c78fcb6c6061141452899085c504bf15e23749611dda00b6913e75ebbe47ca436a2ed016175d0918f193e474f13974a2f6a5304e18909a87ee","ssdeep":"384:3ai3F3N3VKUINthDa7Vnq86z3JCDKSz1m0hMtkJI2Cg0WEUOv5Dq:T3l3INthDu1YCDKS5flC9m1","tlshash":"6a9261ccb2d9b54c47abe072143f200df03a996951496119bc79e9ebecf060aa077f79","first_seen":"2023-03-07T01:14:38Z","last_seen":"2026-08-09T23:49:55.270728Z","times_seen":17963,"resource_available":true,"data":null}},"time_used":2267,"timings":{"blocked":2020,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/vs_standard.png?wsSecret=f16e1cd753f6232f2c8336055a3fa2a2\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/vs_standard.png?wsSecret=f16e1cd753f6232f2c8336055a3fa2a2\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 17:57:57 GMT\r\nContent-Type: image/png\r\nETag: \"613c72b3-554\"\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 17:57:57 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 1364\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1288567874502800249\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss, Cache Miss\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 58 x 90, 8-bit colormap, non-interlaced","md5":"0dc6507363c5e9cc20e4b9c928c47780","sha1":"99adc2af7d9cb373f139d469c11257f3f71fa443","sha256":"4c5de622950c2b1c4c9c72e4ecbe0b34414d45573f28f79db59dfaf768ec014c","sha512":"468a75e094ae155696eb02e20e0eb8cf9fac876edf8a8913270b46342008bf4858c36a919b1894d104b43bb374e51cf1d446b29b32af52602b9b217ef9d0ae42","ssdeep":"","tlshash":"2f21e71bb391cc12830c9d07c68ee10dcd380a7a858076d4f8776321bb6502aca4058d","first_seen":"2025-01-02T07:34:08.374407Z","last_seen":"2026-03-04T19:51:58.900628Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1493,"timings":{"blocked":1041,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/fishing_text.png?wsSecret=bd5a422a49ab369518ee864fa59caa7b\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/fishing_text.png?wsSecret=bd5a422a49ab369518ee864fa59caa7b\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-6f54\"\r\nDate: Fri, 06 Feb 2026 07:12:16 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:12:16 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 131\r\nContent-Length: 28500\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12276029367753339801\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28500,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 487 x 740, 8-bit/color RGBA, non-interlaced","md5":"d919a13a703a29caf5c735ed0d07ef66","sha1":"f2a72bd0c8001f15e61b8eddf10ce62c15827f51","sha256":"9c842e287c1f58f6dc15b1d71c95d35534b8648196131cb84f80bbcf0d9cef51","sha512":"d54037c403ef5cbbd1d49466765f659593584c6ce2f37f89820d602f944dd574070c3908688aa13ac8f43579d2d24d3d9ec9ca0a7e63b7c516e69cc2641e6d7d","ssdeep":"768:F7CwtPbzC4u/i/RLF40BRenmwhuI2wcrJxSZ4iQo:F2kbKa1F40PrhSZao","tlshash":"5ad2e1607a2974ca0b12db75c184b20a0911ced6d80277c53f9be9d7274b1fe9618f9f","first_seen":"2025-01-02T07:34:08.392552Z","last_seen":"2026-03-04T19:51:58.885101Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3601,"timings":{"blocked":3353,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/fserver/files/gb/1377/carousel/10036/1757363851966.jpg?wsSecret=faa3ee7722e8192dcb70c94072ebe473\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:57.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1377/carousel/10036/1757363851966.jpg?wsSecret=faa3ee7722e8192dcb70c94072ebe473\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 17:57:57 GMT\r\nContent-Type: image/jpeg\r\nVary: Accept-Encoding\r\nETag: \"68bf3e8b-5d6e4\"\r\nExpires: Sat, 07 Mar 2026 17:57:57 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nLast-Modified: Mon, 08 Sep 2025 20:37:31 GMT\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 382692\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1939332200900264139\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss, Cache Miss\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":382692,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 692x516, components 3","md5":"30d1365a57d149f506f496092187e46b","sha1":"23b7162598998fd00d24081c8a8733eb9f6f48c7","sha256":"c0443a826eca7df367f00f7107b3a6d0420f6c8ddef288a48840611d84e0f1a4","sha512":"bc0564e0b1ad80459eea046bdf04fe5f70637f1db952f22cdf52bee4c87c038d75ca1ef1bfdb3d87dc08b7ebd0a709d1a7f00f4da51509e05bae5854ac74e621","ssdeep":"6144:JfVvLJ1IZP1KJEXqY0Ci+te1s32Bh5AoHxmnia9mVtAQ57zazeCupSU:JpEPoJEXPY+ksiAYAnV9mVtAQ5HUDG","tlshash":"ce84235af8ae514be970c80a3f33641fe9f1b925ab45307a34d27de699c071fa11b780","first_seen":"2026-03-04T17:58:29.175939Z","last_seen":"2026-03-04T19:51:58.883039Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":913,"receive":1453,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/fserver/files/sportTeam/football/nba21.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/nba21.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=cd06424ba4cc39d1f90c88edc27d9720; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\netag: \"5c08ff98-2b1e\"\r\nexpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nlast-modified: Thu, 06 Dec 2018 10:53:12 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 11038\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"9f601f160d9f512f6c4e9d7cf06697e3","sha1":"d4530c7caef4a145eb8e9171514e4498cf6fec69","sha256":"e17cf24e9c550466af477f7ac3198f752391ae5dc53c7c7b5a93197efea8fc59","sha512":"57d8687218c2c6822d6566bebd959ef024dd3ca5287b6b764b9bc9ccb10e6c23730bf71cd71ddcfcf9069f61606e0a29340cce20e1f483baa81b74f57336ea68","ssdeep":"192:3hX2KC/qlZgG2HdPc0ddcCWAh+yRMLx9qIFnsKhKJcOMYUgzd0X6EGA6AXj5c:ddCEZI5nbWALRaOIFnsUKJaYtPsjC","tlshash":"8232c08cce4cf7276bcae104a922c5b4d230761ce1c6d8232d0966ed46803ded525cbe","first_seen":"2023-07-01T20:01:05Z","last_seen":"2026-03-04T19:51:58.94622Z","times_seen":42,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/fserver/files/sportTeam/football/nba22.png","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:58.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /fserver/files/sportTeam/football/nba22.png HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=cd06424ba4cc39d1f90c88edc27d9720; SID=BFklx/uoFp79U7N9ZJUX3RZYJNPxgluda9MH+gtHYcJEmlBWf0F+PeXlcR+hu9RutPg9G0byjkqwilAPJxhv4BqGLB/LiX6eQCZAlczbfeCUGGQYDDU=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 17:57:58 GMT\r\netag: \"5c08ff98-4ac7\"\r\nexpires: Sat, 07 Mar 2026 17:57:58 GMT\r\nlast-modified: Thu, 06 Dec 2018 10:53:12 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 19143\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"88a8026dad14ef10ac9211a67267e026","sha1":"160ed8a7cbdf0e99c05c161df7b0d6fec2341a43","sha256":"e02b1258e7326fa66c8ca4c6950caf1c7a7febd0264217a99fea4a60e927b269","sha512":"7f286c55d61cc942cee077b03cbe33c41abc9b28a7acfbf01e3b24bfb95f50de17d8e14d664628fe869ca09a622206eae456267fd0a02de15a8ad0280724f2b3","ssdeep":"384:DmjmaMwNDDBxn1zuEv22PzdnUT6u0eFqd8bAoOP2cl0Vb0hVcO/cmbR+nY/rrNvz:DCmaMCn06pp+6uvGMAoOPRl0VJMc++Yx","tlshash":"0782f17ed82138b8b2c219668716a6802791b1ff0f59e2d3fc89d021319f17431e73c2","first_seen":"2023-07-07T01:12:56Z","last_seen":"2026-03-04T19:51:58.935635Z","times_seen":248,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Bet365","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Bet365 phishing","tags":["bet365","gambling","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/message_zh_CN.js?v=1772438913332","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /message_zh_CN.js?v=1772438913332 HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncache-control: max-age=259200\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript;charset=UTF-8\r\ndate: Wed, 04 Mar 2026 17:57:51 GMT\r\nexpires: Sat, 07 Mar 2026 17:57:51 GMT\r\nout-line: gb-cdn-801\r\nuuid: 01377-01-00000000-17726470719e1f\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33499,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (15759), with LF, NEL line terminators","md5":"5e29a736bb07482814f4fb40f94618e3","sha1":"95031dd994aa15757b741e35e8165e6e54b396e6","sha256":"9cc0606e9e078be2bd4a7f0128364ad8a989ba363258d3d6058d8cf79b1fd3a8","sha512":"6df469c4d40670119fc0071f8339fc104ef3f9b8e96608462fb533295ae361da6c177d7d67a3ea50bb2da87e8c27cab6f4a54019f8feb61c5a846350d315c8c8","ssdeep":"768:IIy92nyfB+vODR01IRBG3Jpf3OEg7/wiwL38:Ib9BB+vF1IRBG/Op","tlshash":"05f24c8746fecbf68a4a0af99c5301ae22b557c8c9ec79147f90ddd92b457c900a7383","first_seen":"2026-01-15T08:15:21.544222Z","last_seen":"2026-06-07T07:30:11.553837Z","times_seen":6773,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/index/getAppsUrl.html?device=h5\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:54.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=h5\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:55 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 01377-01-00000000-17726470751986\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 905\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1140,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"1527e8d965b5ed7459e70d0325fcbb25","sha1":"cd91a2d41fbf21dfcad351bc021313a0290d72e8","sha256":"0c87fa410c8b80165150467418d8199d2ea501ab0f9171e370e0741c2536beae","sha512":"68d30bf0e82b22f7688a26910ecf2cbf56a472b7b880caf1b8adb349385f00aed4ef7c22ab48f02fcc4cc81810d03c7ac0ce9b6568a37108c11d2701e31c2742","ssdeep":"","tlshash":"e321f9272edb5c4c1033f7e4d794e8b09b115635e2a431830f8d2c0e04e7ea1db0ea5a","first_seen":"2026-03-04T17:58:29.179772Z","last_seen":"2026-03-04T17:58:29.179772Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/payment_icno.png?wsSecret=621ad383486a59a21a3483926e5c0093\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/payment_icno.png?wsSecret=621ad383486a59a21a3483926e5c0093\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 17:57:56 GMT\r\nContent-Type: image/png\r\nETag: \"613c72b3-c20\"\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 17:57:56 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 3104\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12407149455222137310\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss, Cache Miss\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"a9fcb626139d2c39c9d2efc90facf477","sha1":"d4023262be11e93fc7e7ee6835d1bfdf918e66ad","sha256":"25a925c3601c3e7266fe736b4f265e6d979411fba2ac43a1ecc55f977169f411","sha512":"e074ae80d0c2c55023f22d9a3b7c396377a73e8c0830fad194dcb1bd32c14a7b4affbcaf8cdb95bca651c2a8841e85fb02d80f5a04f9c85385408311355c6e88","ssdeep":"","tlshash":"5d511b8af4970d50154ea5c666fdf16b6a134ecc14c158556ccecca3ad602f3861c5da","first_seen":"2025-01-02T07:34:08.342024Z","last_seen":"2026-03-04T19:51:58.875368Z","times_seen":4,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/part-4-title.png?wsSecret=7f19a83e0fdab30755027b2a92bee1cd\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.332Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ftl/jxf1377/images/part-4-title.png?wsSecret=7f19a83e0fdab30755027b2a92bee1cd\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T17:57:23.859173Z","times_seen":17821759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/browser_bg.png?wsSecret=bc1e8b2fa1293bf181b096f62ba7628f\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.347Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ftl/jxf1377/images/browser_bg.png?wsSecret=bc1e8b2fa1293bf181b096f62ba7628f\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T17:57:23.859173Z","times_seen":17821759,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T17:57:49.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:50 GMT\r\nout-line: gb-cdn-801\r\nuuid: -\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-html-cache: HIT-3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":891862,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"860cf12d0e81d81244d495361ded99b9","sha1":"f7cbf3473d85806d0b376362fe7a02f6820776d4","sha256":"3138a0b54f8d44bd915baf690c9eed7f04a81a03fa2823a864cc3f386aa58ca0","sha512":"39dd4bba80dcfa3287095800b6ef969d3e9b70eb6555cf3ee597137dcb423cffe771aa22b5c63abb3528670ca67eb50e4bb21a8c1a143429f16965418e1ded48","ssdeep":"6144:qDVFaAd/bd3zai0vsDjMVXCh0CARZ2uGaHjh9eSiOicVrI+3b:EVM0bd3ei0vsgChpARZf+g3b","tlshash":"88151b0266f1212615abb0f94e7e37003536d277fe018d1478af15ccaf96f91b6a3e98","first_seen":"2026-03-04T17:58:29.181835Z","last_seen":"2026-03-04T17:58:29.181835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1048,"timings":{"blocked":414,"dns":1,"connect":203,"send":0,"wait":220,"receive":0,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:51.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /061410/rcenter/common/static/js/gb.validation.min.js?v=1772438913332 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 05 Oct 2022 09:40:30 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"633d510e-7fd7\"\r\nDate: Tue, 03 Mar 2026 08:12:41 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Mar 2026 08:12:41 GMT\r\nX-Cache: HIT\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 5207\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 4601565229048118716\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Refresh Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (801)","md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-08-09T23:49:55.26862Z","times_seen":18163,"resource_available":true,"data":null}},"time_used":2779,"timings":{"blocked":2477,"dns":0,"connect":0,"send":0,"wait":301,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jixiangfang.app:8989/index/getAppsUrl.html?device=h5\u0026fPixelId=\u0026accessToken=\u0026apiVersion=","fqdn":"jixiangfang.app","domain":"jixiangfang.app","tld":"app"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:55.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jixiangfang.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 17:45:04 GMT","end":"Sun, 26 Apr 2026 17:45:03 GMT"},"fingerprint":{"sha1":"36:BB:DA:34:8D:84:AF:20:6B:91:90:F0:DA:87:5F:89:91:9B:A3:7F","sha256":"6C:F7:2F:79:36:05:A6:9B:AC:66:C6:EF:B0:0C:56:A0:60:5A:53:D4:2E:BA:03:7A:00:D5:D4:A8:DC:B3:C2:C3"}}},"request":{"raw":"GET /index/getAppsUrl.html?device=h5\u0026fPixelId=\u0026accessToken=\u0026apiVersion= HTTP/1.1\r\nHost: jixiangfang.app:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nCookie: sticket=md0TkdVMlpDMDRNMk; route=a1a97600d4111120168c5ba2bb9e992f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 17:57:55 GMT\r\nout-line: gb-cdn-801\r\nsub-sys: msite\r\nuuid: 01377-01-00000000-17726470754e44\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 899\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"be7f451c5b89e3fa152f8e4179c1d736","sha1":"f15895da46478f314cedbd812c37dbcf29f2e886","sha256":"df4e2487b90d3eed7cfae7858624ea393b1de6a8228d3fc016932507f3765787","sha512":"50521dbd39b694a32b53f93193efa0c461d4f0d1f8a062f1606eeafdaac60b441c9f935c6ab7492e9a2595fb3d5f297b54361ad4ecbd16ab1a72019331e33a80","ssdeep":"","tlshash":"aa216a2563f76cb68e61440bda0c19745d600e9618c064215b91b757d9c4a1247c7719","first_seen":"2026-03-04T17:58:29.182973Z","last_seen":"2026-03-04T17:58:29.182973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/reputation_icno.png?wsSecret=23b19a2591c4a8031061d18128eae2bc\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/reputation_icno.png?wsSecret=23b19a2591c4a8031061d18128eae2bc\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 04 Mar 2026 17:57:56 GMT\r\nContent-Type: image/png\r\nETag: \"613c72b3-efe\"\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sat, 07 Mar 2026 17:57:56 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nCache-Control: max-age=259200\r\nAge: 0\r\nContent-Length: 3838\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9172178931445063690\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss, Cache Miss\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3838,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"99ff89a120561a25b236d81be0f0d9e4","sha1":"2e7f9ef30b6717ab9f49582cac8e1f416bbb0dc6","sha256":"6dbffa89dd82191880db110e809c8cd3eb8be458efd3e5c79b38460b18f169cd","sha512":"406a77fadea4004aab43312066c33cb1f15b354ff54a594878391b76faaa31c291fab962eaf394821fcd6496bc0f30ae1b2106c64c85975f4d50eb7ba51f65d6","ssdeep":"","tlshash":"50814a66ee9408082045fb2a24e1a5e61eb3c8d19f0255e67cce48d3d9300f9ed0e2d7","first_seen":"2025-01-02T07:34:08.33883Z","last_seen":"2026-03-04T19:51:58.926437Z","times_seen":4,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/live_person.png?wsSecret=ded5b5b5fd7127da55e994ccf5cd358d\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/live_person.png?wsSecret=ded5b5b5fd7127da55e994ccf5cd358d\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-17ccd\"\r\nDate: Tue, 03 Feb 2026 12:50:04 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 12:50:04 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 153\r\nContent-Length: 97485\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7784484408334144576\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 605 x 740, 8-bit colormap, non-interlaced","md5":"a900d9106deecda3499d762072a13431","sha1":"cca804f3447f07ce0a22bdb0a999f8ccf09ac1bf","sha256":"988a1c9d77a108d12eaba2f3efb605be2ac2d0d69aff457d9523f09e33d200ab","sha512":"8534b9162004d7db7297e506cace2944be8aec155809ba7f22c07dc2b5b11fe858bb596cddc25d9dda0054aa38b648c78d843bc5dcd2bd4275d1e560f8981b44","ssdeep":"1536:vwhN/K+rMpXsxSmGGIAKuXxXnl+gZCc+GR7DxOYKs1crJzrPJoLsWvkTGSJ66Y9F:x+U1mI23lf99OCWzuyt5TXXp8Lqon","tlshash":"979302be3dce4913ee15d9cf1425840e5f7dae05b16f28a70a0396428f7b8513ad9dc1","first_seen":"2025-01-02T07:34:08.378433Z","last_seen":"2026-03-04T19:51:58.898404Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2095,"timings":{"blocked":1837,"dns":0,"connect":0,"send":0,"wait":253,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/chess_person.png?wsSecret=4333b47528190e529ff29b0057c7d475\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"211.95.142.138","port":443,"asn":135061,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/chess_person.png?wsSecret=4333b47528190e529ff29b0057c7d475\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-24f3d\"\r\nDate: Thu, 26 Feb 2026 20:09:00 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sun, 01 Mar 2026 20:09:00 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 42\r\nContent-Length: 151357\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17983594965317455907\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":151357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 897 x 740, 8-bit colormap, non-interlaced","md5":"0f85647e236e7a5af1575e2e601aaeaa","sha1":"f8e87a3eab95e19a4ac1d150186d555afe180c33","sha256":"216d6400189158391265ce722f53bd17e810429a7e92993e6bc6c5df7fe3063f","sha512":"2e3db68fec4dee424feee0ea8140e78928c48ce77a86c317bfdc5999d93756ac3dc00495411ff1819e4f4c105b3dadbb1d17789794cccef4af6c7eae2fd007b0","ssdeep":"3072:2rX/+nDh6CJqTE5SqOgWC4agxBL6JuSgcfY8AB3mbEnYN/iG:gPiPJqLeWhBxFcPgcfu3c/","tlshash":"91e313628de0479e27efc4c2109c19c41da36a2f923e9f56d2dd94bf7a6c923be0141d","first_seen":"2025-01-02T07:34:08.397994Z","last_seen":"2026-03-04T19:51:58.918099Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3211,"timings":{"blocked":2916,"dns":0,"connect":0,"send":0,"wait":289,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/lottery_text.png?wsSecret=82183c86bacb487ef1185813bdbad58d\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/lottery_text.png?wsSecret=82183c86bacb487ef1185813bdbad58d\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-55b9\"\r\nDate: Fri, 06 Feb 2026 07:12:10 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:12:10 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 136\r\nContent-Length: 21945\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15291235564964412946\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 539 x 740, 8-bit/color RGBA, non-interlaced","md5":"914fb9190d5fb29e54525fcacd3aef6f","sha1":"ae34202ca4fba27120907b709323e7f151c52654","sha256":"2bd098f0da249b8c025249733abcaca25c4c86d025e5eb7c546a52d858001afe","sha512":"824dbce3a64cc90ef041ed8561fbdbc3aa6270ff1b77db2c3dd24efd215744c1f4e10a9ca11c431d0dc309b2806f5b27c723221479abca34582c35889112d2ce","ssdeep":"384:Ueng/sJ4LC5PWQi/JCKWrN6hit73FbnHT8hyOQOB8tgPvAyMD+o2HKHfRdLgCuD0:9LAQuErKS73Nz8hnqtgPIyMDhwKHfRdt","tlshash":"45a2d0a665e1e6f8f6eafa48f875e1c270cb422e083b5c9052edbcc1a860405e1b44dd","first_seen":"2025-01-02T07:34:08.389525Z","last_seen":"2026-03-04T19:51:58.91882Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3550,"timings":{"blocked":3237,"dns":0,"connect":0,"send":0,"wait":312,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/fserver/files/gb/1377/carousel/10012/1598237784855.png?wsSecret=802c89013be971c281999452a21665f9\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:58:02.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /fserver/files/gb/1377/carousel/10012/1598237784855.png?wsSecret=802c89013be971c281999452a21665f9\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 22 Nov 2022 18:25:29 GMT\r\nEtag: \"637d1419-45933\"\r\nDate: Tue, 03 Feb 2026 12:42:06 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 06 Feb 2026 12:42:06 GMT\r\nX-Frame-Options: SAMEORIGIN\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 153\r\nContent-Length: 284979\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16545813972083210858\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":284979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 580, 8-bit colormap, non-interlaced","md5":"1617f53142d0490bd7339f5460cb0b05","sha1":"b0ed8995c41123fba0fc08dedd4305a3bc6c93dc","sha256":"1ab2f162c4e5c9e3e05fbc89ace77bd9f8aa83c40cd5a991a94892c16c0588cb","sha512":"1dfbd8aa6fa354042f274ebd7208327c3703f0a625591e4996300a0a04f28c0e30366a7a38188d0952d082998bbaa8e4784dd98ebe00d33a0564be814e829ef9","ssdeep":"6144:I4JtrSl9JHfxERP8d9tT3vGZOdg+nC6qyffReH/3wnvR4Y:I4JtrSldJVDvGYdg+nVNfZeQp4Y","tlshash":"0d54225a4311864a9109d52b06ae2510fc9bcb5a50763aebcc8e721787bb36b1f1f37c","first_seen":"2025-01-02T07:34:08.445749Z","last_seen":"2026-03-04T19:51:58.920471Z","times_seen":4,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/images/sports_football_01.png?wsSecret=778fd7f31bd4904f3fa9c796a2e0dd48\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/images/sports_football_01.png?wsSecret=778fd7f31bd4904f3fa9c796a2e0dd48\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-11bda\"\r\nDate: Fri, 06 Feb 2026 07:11:54 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Mon, 09 Feb 2026 07:11:54 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 148\r\nContent-Length: 72666\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1192605404584218865\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 474 x 604, 8-bit colormap, non-interlaced","md5":"e22238ac9ada0f783e81a3a870f0dbcf","sha1":"7874779b5e6020693257f2fd3e4ee8700c2632da","sha256":"b107d46428fe14b5c45f480527a23dd716c39c0487cfa30a2fd579f27cc39fa7","sha512":"f0e51116b6591eff4ee074088cc286e563dcbfeb0ad8aa93d77c9097ecb7cf414ff8567e8e42251782da57e97e766327fde98156c8ee8b62d44e96358997a728","ssdeep":"1536:kLfANa50LLoKmk0RySOMbVJ0bSF2UzjRBgKJMaWm+PxAadQ:kL350LjUySdb30bSFPgFvdddQ","tlshash":"2e6302bf22986d5d3353042b5dc526e822a692e5cccc4d2b0f4f4dc65f0e7aa46a374d","first_seen":"2025-01-02T07:34:08.345936Z","last_seen":"2026-03-04T19:51:58.878589Z","times_seen":4,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/top/top_icon2.png?wsSecret=e2f783fcf6a18e86c542af6228671192\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/top/top_icon2.png?wsSecret=e2f783fcf6a18e86c542af6228671192\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-143\"\r\nDate: Tue, 03 Feb 2026 10:16:51 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Fri, 06 Feb 2026 10:16:51 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-211\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 152\r\nContent-Length: 323\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13693112906678308386\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 24, 8-bit/color RGBA, non-interlaced","md5":"55a163b069991b3450b90d171f02ea92","sha1":"c06e710d1b4f57fb5e686ae0be0d65b904f1ffac","sha256":"738f932060676439a72b722051c7626215f5fc132affd6b37f6e8d853eafc349","sha512":"d0524a9252a0807eef3cf14119a24816f52bab5d9f1e89770f6c498ddf37245bfa7ae6e20a8f191f44e5bc837fcb18a7f10ad790e5b8317cf85d5ca020ca3fc9","ssdeep":"","tlshash":"fce028f0810241df47125426f03d56d3f414755301152544151852355532fa51026193","first_seen":"2025-01-02T07:34:08.369994Z","last_seen":"2026-03-04T19:51:58.905657Z","times_seen":4,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":502,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o1tyg6.pham.xin/ftl/jxf1377/themes/images/index/sports_football_bg.png?wsSecret=f4a19dfdb70d96935709b8857731752f\u0026wsTime=1772647073","fqdn":"o1tyg6.pham.xin","domain":"pham.xin","tld":"xin"},"ip":{"addr":"1.56.98.184","port":443,"asn":4837,"as":"CHINA UNICOM China169 Backbone","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jixiangfang.app:8989/","date":"2026-03-04T17:57:56.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pham.xin","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Tue, 02 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8D:E1:DB:0C:6A:1E:A1:35:4C:A9:36:95:EB:81:E2:4F:E3:B4:B0:F4","sha256":"17:C8:21:E9:B5:4D:A2:16:1A:91:DD:6B:E8:57:BB:1B:57:64:E3:89:CA:6F:EB:3B:04:1B:7A:5E:19:36:49:7D"}}},"request":{"raw":"GET /ftl/jxf1377/themes/images/index/sports_football_bg.png?wsSecret=f4a19dfdb70d96935709b8857731752f\u0026wsTime=1772647073 HTTP/1.1\r\nHost: o1tyg6.pham.xin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jixiangfang.app:8989/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Sat, 11 Sep 2021 09:11:15 GMT\r\nEtag: \"613c72b3-ac3a\"\r\nDate: Thu, 12 Feb 2026 12:16:18 GMT\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sun, 15 Feb 2026 12:16:18 GMT\r\nX-Cache: MISS\r\nuuid: -\r\nout-line: gb-cdn-212\r\nServer: SLT-MID\r\nCache-Control: max-age=259200\r\nAge: 153\r\nContent-Length: 44090\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16732177897055141221\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 737 x 620, 8-bit colormap, non-interlaced","md5":"cd0e2477cbe0d74d21371e34e4681037","sha1":"51d2535a7823b3cb0007506e4b86eb3ad879ec51","sha256":"2f970ffdda2b04c0c064c31322687e958a59139fef2868d0f63bee655d02c696","sha512":"837530b3ec3517d0c3bc94488670cc7ef15a5f2b80a63ccd9635c92a088bc31009b382dd4e160c2e7a6683ea9f9bcdf20ce60323fc3670dc844d7b95db8b62b3","ssdeep":"768:W3KuB+5q8GM1Bauukj95wMz7DvzriIymeJ4vqBpLU1uacesDKlEJd/NQwWm:SRJ8GMLdukj9xXiIovLU1uTeslJMm","tlshash":"9213f25a7e2b2f56c8620f6d1089f20487b6f59b911b668815cdcfc0e2fd8c332b8906","first_seen":"2025-01-02T07:34:08.372716Z","last_seen":"2026-03-04T19:51:58.943347Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1305,"timings":{"blocked":1021,"dns":0,"connect":0,"send":0,"wait":270,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}