{"report_id":"bf40e2e1-a985-49f2-a10a-9eb25dc533e5","version":6,"status":"done","tags":[],"date":"2026-03-16T17:30:29Z","url":{"schema":"https","addr":"yhxca.vip","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"yhxca.vip/Home","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"title":"Hinge Club","dom":{"size":16418,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16183)","md5":"93a8386ad31dbf694314aea51df0a16f","sha1":"dcfc862fe86359fee41d0b842ef60bae2897bf2d","sha256":"4861075df5fec60d6b464b0608c223e5d172229c9bc894ed8d2b75c8b688e80c","sha512":"8c5043c79f4ef3d0e90bbd68f9d264d288888979d221395f3c6fcbbc926b12c4c075565c5a3b2b30117f818cf1a4a35e50c55272250a51f4395e66d1c0b21976","ssdeep":"384:+iXUZCR7O6+Q+THLpEpVEpiLpMMLp4v5LpVr/p:xXUZCR7O6+hTH9mVmi9MM9C59Vrx","tlshash":"04728b3b6166147702b3d0c06c51ea0e5c76f32bc156ce885aad83461ff7d72b8bb586","dom_hash":"domhash4b86dfa3755c494229f2efb6d0a32478","first_seen":"2026-03-16T17:30:35.912525Z","last_seen":"2026-03-16T17:30:35.912525Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"yhxca.vip","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-20T17:30:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api.yhxca.vip","ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-16T17:29:51.835966Z","last_seen":"2026-03-16T17:29:51.835966Z","alert_count":0,"request_count":35,"received_data":3367699,"sent_data":16517,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"yhxca.vip","ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-14","domain_rank":0,"first_seen":"2026-03-16T17:29:51.823542Z","last_seen":"2026-03-16T17:29:51.823542Z","alert_count":0,"request_count":36,"received_data":5293327,"sent_data":16217,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"yhxca.vip/js/app.fa079982.js","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6710ec3f7b4a5b65bcbad365baa6e3b5","sha1":"69ea17fffa4aea207b9623bb67bf532e7238d755","sha256":"d044d088bbe736198cf0d95a97da035ad267dad68378e13bf4fa695915714c75","sha512":"999374e3fc0e84f48de0b237f84ac0c88d6a28ec769e1ba62589e5f40f5574bc6f8537c50cb64bb5184fe7307d784ac03919c1a1bb75adb3e1593906697cb424","ssdeep":"3072:5c8GwHT2L+NVpjq9HH1gva53AAfaNNopZxiNcoJ7:5FPD+9Hy6QAfaNCxecoJ7","tlshash":"56342b4b9581dd291fb151e1701a12f5f2a829dbb44ac48eff3ce98812cef9d520e5bc","size":252792,"data":"","first_seen":"2026-03-16T17:29:59.526855Z","last_seen":"2026-03-21T11:41:13.250997Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/js/chunk-vendors.8b8d7d3f.js","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55658b2159a202fa1ce9d11eb20d6e9","sha1":"0d6519b986e290f96d95eb07e6ead5f5137b17a2","sha256":"745cd8e6641e6f72ac23b2f6a2d62ad4ff9ff65e565b22d6b8aece2e88586fa2","sha512":"c05b1a3683d675ee5983b3f27c3eb5a1879ee2a329d4af3e6934a47876a66b4f3e127bd2376a7eab7d30f46f0db1c6fca59f8f880714526cc2b69bf16f087bce","ssdeep":"24576:ALKCGrAyIJ1PyIB53br9zQ8IZE45BKCGrAcJktf9QskLgEmR8:ALKCGy9B5rJyZE45BKCGbJktf9QOEmR8","tlshash":"af951acd7295b06147d3b0f5402f120ab33a596ca80dc0acf669e9e56db894d623bf7c","size":1980814,"data":"","first_seen":"2026-03-16T17:29:59.553255Z","last_seen":"2026-03-21T11:41:13.282275Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/js/app.fa079982.js","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6710ec3f7b4a5b65bcbad365baa6e3b5","sha1":"69ea17fffa4aea207b9623bb67bf532e7238d755","sha256":"d044d088bbe736198cf0d95a97da035ad267dad68378e13bf4fa695915714c75","sha512":"999374e3fc0e84f48de0b237f84ac0c88d6a28ec769e1ba62589e5f40f5574bc6f8537c50cb64bb5184fe7307d784ac03919c1a1bb75adb3e1593906697cb424","ssdeep":"3072:5c8GwHT2L+NVpjq9HH1gva53AAfaNNopZxiNcoJ7:5FPD+9Hy6QAfaNCxecoJ7","tlshash":"56342b4b9581dd291fb151e1701a12f5f2a829dbb44ac48eff3ce98812cef9d520e5bc","size":252792,"data":"","first_seen":"2026-03-16T17:29:59.526855Z","last_seen":"2026-03-21T11:41:13.250997Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/js/chunk-vendors.8b8d7d3f.js","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55658b2159a202fa1ce9d11eb20d6e9","sha1":"0d6519b986e290f96d95eb07e6ead5f5137b17a2","sha256":"745cd8e6641e6f72ac23b2f6a2d62ad4ff9ff65e565b22d6b8aece2e88586fa2","sha512":"c05b1a3683d675ee5983b3f27c3eb5a1879ee2a329d4af3e6934a47876a66b4f3e127bd2376a7eab7d30f46f0db1c6fca59f8f880714526cc2b69bf16f087bce","ssdeep":"24576:ALKCGrAyIJ1PyIB53br9zQ8IZE45BKCGrAcJktf9QskLgEmR8:ALKCGy9B5rJyZE45BKCGbJktf9QOEmR8","tlshash":"af951acd7295b06147d3b0f5402f120ab33a596ca80dc0acf669e9e56db894d623bf7c","size":1980814,"data":"","first_seen":"2026-03-16T17:29:59.553255Z","last_seen":"2026-03-21T11:41:13.282275Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.yhxca.vip/api/system/config","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /api/system/config HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: vn_vn\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tPcPLs9Lm4EtqpeRo2TbsaW8WxxK1DLQ4Jo%2B5JXbhWO%2B08M3mnOzsoDwgF4ixBUhb44i18IVpyTz0bcCYyx%2F40iE4P4abHS8F0pqGVo%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dd57beed8bbacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147799,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7223e7b28feec012e013e18bb8bd1b85","sha1":"0a0170995674a02cef19f8b52841fd8d5c3a186a","sha256":"a73376bdd5a9e3f8784ac7f8f9f8930b9679421fc9a7915382fcf97bab6fa270","sha512":"a7875a709cf9e023489c435c542bc80bb17e1fe47ea1fb0eb5efdc3294b8221a4a264ef0b3eb0eaec72105e7904b5591120b1c647e735d6702cfe4901de9a829","ssdeep":"768:OSejm3NrlSVgzRorLh4PVs+xXo+u8EIUgtfzqg7mN4EI+4r4Y0qmouTwo8/K4kOy:+I9lSVYV4+uxIto4EqzK4B6GLU","tlshash":"05e319fb9c972bf8d13d6b272c5a4a9bc661c86629510f1cca4c9c0e9072b3355f0add","first_seen":"2026-03-16T17:29:59.528832Z","last_seen":"2026-03-21T11:41:13.268225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/xuanfei/address","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"172.67.214.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /api/xuanfei/address HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: vn_vn\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJCgOhmiKo7BgBaNeOYXUArv3abwP6T6UWPhKjkAV3tugjCv6m2weJwi8BG4BtRhYjHB681J1Zw0HQcX9AielZUkB6gZWiSCqaXT%2Flc%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9dd57be4fefca106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4113,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3ca15fe43a00de7094b395ea32903e1b","sha1":"555fae9a1419df0ce955a7f2d0f1421977996202","sha256":"bce0e0058bf78c30e9cea9b3fc033c036a413376400650181356f85f07a7a10b","sha512":"0ff05bfcfc813a27ff43f0740cef5a32c447f5393b12595aea5e9f4f33be86dcd25b607d2542882693ac800f4d1d0d4cce8cb12caf4a969815fb2b1d03f68fb6","ssdeep":"96:Ue6AZQqY3OlGFYqpST5z8mT4f9VChMaAUqhPpOMhmO6grm:UApY3OlEM9gmTMdUzMm","tlshash":"1c8173ab1e0748dde58b4e23ed6a1a9507e4403349f30c55faa9bc2e5c291bf720a1cc","first_seen":"2025-11-16T18:14:38.154413Z","last_seen":"2026-03-21T11:41:13.272844Z","times_seen":5,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/css/app.a1c06371.css","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:06.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /css/app.a1c06371.css HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e438-16f96\"\r\nexpires: Tue, 17 Mar 2026 01:29:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 14423\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KEDKTwAgQCeJ7D4RCXPGdUVOOpSsU8yyLHbTZ%2BiIEpNG3mKTkBPTKB7VNoh4RYHjnSBJNBHgdfskPackgzDgXsf4Qib5X%2Bu27g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd57bde9889acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94102,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c9258da29e8ed863ef1f455f41cf2702","sha1":"5954ee4d88d4df8b55aae9db37af6557129e09b1","sha256":"5a09ffae6564eeb965d44d74f9294aab25aaaa7ba531dec88fa3d6699056ef26","sha512":"6922800f2d7cb20e609133b9aadf875c10aedfa6fe44edfa14e94bde0aaf4ee83a6890bfc2a07d581b2f2c91e58db9a3d933fe78f77f59e6ca8341445bec3268","ssdeep":"768:BVQ7zqPswVxpqJFqVrwG5kw2/ttZyZZM1rVTzrHCsydfR+kLMH//D:Y3qxx+yjqoi/D","tlshash":"9e9373327b1e2419a47bc45a38e4eacc206ca713d1424b6eea167777cec72c73976748","first_seen":"2025-11-16T18:14:38.158889Z","last_seen":"2026-03-21T11:41:13.254915Z","times_seen":5,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/like_active.png?d=1773682207135","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/like_active.png?d=1773682207135 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 1727\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-6bf\"\r\nexpires: Wed, 15 Apr 2026 17:30:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qJs1n8hCXNyEoXa%2BHZMJbM1FBMJTi8cb3NKkjjnEmFRtpVnjRC%2BsutaF%2BkCcVrS7pwc7b%2FPd9c64yu0LeoVb%2Bj25nIcLlgzkNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be2c9acacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"2c730da5e1a738a4b25a6413a9c29217","sha1":"37d617970a1c5bb415bf36363006e0744498ce65","sha256":"fe45ac8900fba5d5b86779c48e42060b6680d15837d925986db8612853a73c8d","sha512":"ab7f4d8a6f0ea79b79ee1b81883f1670d1da3132ffc58c5ed5038852b4d1836ec42b5f4d74ddcd3c6f7ce947aa573a3195d67b7f9bb4254b56912e8283f08b3a","ssdeep":"","tlshash":"05310ba25754f778cfd0e8b129199b1359a312dbf6464c61483bc5784d118f14a683e7","first_seen":"2025-10-27T20:35:54.203688Z","last_seen":"2026-05-30T07:42:56.612122Z","times_seen":7,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/js/chunk-vendors.8b8d7d3f.js","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /js/chunk-vendors.8b8d7d3f.js HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e438-1e398e\"\r\nexpires: Tue, 17 Mar 2026 05:29:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 42\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9SXXWjvTEunU35wwYD78MlA6vlo9Kn0DGgq%2BLCu0eF9O4A2g%2FS7vKx4n4zdlsIDZi4sCczNfdr%2Fe8ZuTGGi%2BVMZ9mIe4ITdpdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd57be47a37acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1980814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46065)","md5":"d334e6f7926c5694c247f886319b342e","sha1":"ae661cd6528432db500dd7ff8dceede3da8e2c41","sha256":"b04987b28ba7b4556786d819d5ee4e8179ed96a947c24b81a148f4e9bd6ce2b2","sha512":"c8f2bee6f5cbcca563a8de85620313bd52d1ed540c559d7dcc07abf5bae0506242ad3f34964862d1f53ec71bf456df8b2bfe2be06d917f6e346c9f49f959a8bf","ssdeep":"12288:A15HKCGPtZAyIdKe1cAI2VEIB55D1bXLnI:ALKCGrAyIJ1PyIB53brI","tlshash":"1a25198d72c1b06643e370f5402f120ab33a596ca80dc09cf665e9e66db994d623bf7d","first_seen":"2026-03-16T17:29:59.549093Z","last_seen":"2026-03-21T11:41:13.271536Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/home.png?d=1773682208122","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/home.png?d=1773682208122 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 838\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-346\"\r\nexpires: Wed, 15 Apr 2026 17:30:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ws%2BQTqhVl97YPRAXX4aMPZbRBGwc7CwGd6RXJSsNm5xM%2BYl0FEmKkbcvFNuC595c6eA5%2FaYs2YLvVr%2F5tPpgpdrXKqtkgsOkUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be8df76acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":838,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"83e4f1a197253c8fd529182e4fad8c75","sha1":"9ea054daa153e17839700bcbbc3dadb3b0507877","sha256":"269e458b041fa4a1f1db7f673359dd653c4398a11f73b6fd14700547314515ac","sha512":"0b615a87c822ef3dd3a61ef9efac17d09a9683210465ca424dbe25150b7692e3161aee070e6d9b88ea79172a9198db4359c51f0cc06a9c0df4780bef9a12daa6","ssdeep":"","tlshash":"6e0152a9a3a4057fc6436b96b30692ce85305060ee0aa90e6138e42a5c31d1e09cdb0c","first_seen":"2025-10-27T20:35:54.204527Z","last_seen":"2026-05-30T07:42:56.657409Z","times_seen":8,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/xuanfei/xuanfeilist?page=1","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /api/xuanfei/xuanfeilist?page=1 HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: vn_vn\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tnUS0BC5H5sokWBs7Rh7Mm8hdWf6W5xFvklHN%2F77CinGD1iXvS4U26AmVuPttRJTZqJAjAFVuf%2BB9gzeep%2F9P1vzSfTj3RbE0WgZB4%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dd57bee2885acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8349,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0ecb8b4b76f1dc082d0ab5684501b5a7","sha1":"f81fdab82fe00d20b9919f5a1e61ac3b976e93b0","sha256":"47c9cae8069c9db7f63d3e67a58428de7702904745e27b4f343d3018ca7710fa","sha512":"b64056902e007ab3e45f945d61b524513940cb30a7c6777ca8df6d04d142603f01f8dbe55d51cb09e439fb5802860921cbe4ec84f5f2200a49cf1604dc75c855","ssdeep":"192:9fbEJWPOPQ4VUsVzAO6PzBRVUqdmYOdG9WE:9oEPOPQfsBAdPNoqdm/dG9WE","tlshash":"b902c64710111beee026ef033d662fbe0be084ba208725f8a9eddc1c658177fa46d199","first_seen":"2026-03-16T17:29:59.53016Z","last_seen":"2026-03-21T11:41:13.270666Z","times_seen":3,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip//xuanfei/20240715/b949f16de9eeb8a8ab051c46a9796791.jpg","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET //xuanfei/20240715/b949f16de9eeb8a8ab051c46a9796791.jpg HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 126692\r\nlast-modified: Mon, 15 Jul 2024 13:03:30 GMT\r\netag: \"66951e22-1eee4\"\r\nexpires: Wed, 15 Apr 2026 17:29:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: language,token,access-control-allow-credentials,access-control-allow-origin\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8X7uqOtzz3GqPymLSEqIgikVNZ2c09fJLUQtoU8wXjrylAALT%2Ff8Kd1Ryz7Mnb%2BtswGiDMJ5Ha%2F7qMsfcspMJiRqb8mgfvZLqSsw484%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57bf1a92cacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126692,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1040x1280, components 3","md5":"1057bb6ca1be473baa260484c1e4404d","sha1":"92a08b5ddf0d8a6b61b1549bcb1eaa607407ae5a","sha256":"950bbdfe120809aba39354d5c66e8d0524c1b294f6bcaa93432aa18544e4d6f6","sha512":"5e7ff14d7299d0eb25560f66c007811c688d11b463734e72725f71171856710f21fe0d84633e61d78ba686e9406e2c2579c163b43805bf8cb28f20061dfceaed","ssdeep":"3072:wYXZ8kYHDOVT9XQpRXXtve+4umo7+ANcX+WidYLVkgJ1IbvE9o6:tpXZVTFXo7VhySgUvE9J","tlshash":"93c312ce2a7fc704d1af267c01b211eaf99df84046a67d5aa4061f066fc2d60333bd89","first_seen":"2025-11-16T18:14:38.165622Z","last_seen":"2026-03-21T11:41:13.279855Z","times_seen":5,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/js/chunk-vendors.8b8d7d3f.js","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:06.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /js/chunk-vendors.8b8d7d3f.js HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e438-1e398e\"\r\nexpires: Tue, 17 Mar 2026 05:29:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 41\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYwhN64vJP1j1REld0jsliqvRx007lpztVMs4%2F0gWBjewscisnbXfuw8HWDmQ%2BkLFQBgtKE2CDDr0%2FKpGd2ujXeBVSgrNlBhMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd57bdea890acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1980814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46065)","md5":"d334e6f7926c5694c247f886319b342e","sha1":"ae661cd6528432db500dd7ff8dceede3da8e2c41","sha256":"b04987b28ba7b4556786d819d5ee4e8179ed96a947c24b81a148f4e9bd6ce2b2","sha512":"c8f2bee6f5cbcca563a8de85620313bd52d1ed540c559d7dcc07abf5bae0506242ad3f34964862d1f53ec71bf456df8b2bfe2be06d917f6e346c9f49f959a8bf","ssdeep":"12288:A15HKCGPtZAyIdKe1cAI2VEIB55D1bXLnI:ALKCGrAyIJ1PyIB53brI","tlshash":"1a25198d72c1b06643e370f5402f120ab33a596ca80dc09cf665e9e66db994d623bf7d","first_seen":"2026-03-16T17:29:59.549093Z","last_seen":"2026-03-21T11:41:13.271536Z","times_seen":3,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/home/notice.png","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/home/notice.png HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 3554\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-de2\"\r\nexpires: Wed, 15 Apr 2026 17:29:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjbad54HhyR8KkO%2BSsCGTgF5qqdhfDFHswdeCt5a9oq%2FlNja798grGIKh6x9onUJFl6dvb9cEw8xsYJxkgA9%2BA%2BS%2BgUcXGd%2F0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be28985acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"19ad1bfb3ff1df455126cc3b84724629","sha1":"da7e036a7d1ff70509f4a7a3996ac4dbe59e1800","sha256":"dd340555096bb537db2cebc40b64abc4129c3bb407a202141fc9532a1a2e1904","sha512":"34e51183a63abec8b6ba442d0b90ea82e7120901b7c306359363bd0fd088b753dde9063c3c13c9d90041dd06963ffc7d3f4bb59a0394d02819e9c8387783d2b1","ssdeep":"","tlshash":"d3713c7879bd9e48ed11e77a3f55e37ce244943eef63568431c32908c62a51c7a70421","first_seen":"2025-10-27T20:35:54.196994Z","last_seen":"2026-05-30T07:42:56.640961Z","times_seen":7,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/home_active.png?d=1773682207129","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/home_active.png?d=1773682207129 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 1025\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-401\"\r\nexpires: Wed, 15 Apr 2026 17:30:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bNUmyzjmjD%2F%2BtrYDmts%2FHzfDQl%2Ba8LSIVOK0vU3gwi0Hb%2B2%2FYm3MTNM1iBw%2BfMPsjT2Cm4nS0BJqpUtCa%2FASWcTD9%2FC2KBDM5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be2a99dacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"85e15a83c93c2d44079eb1c0f82b98a2","sha1":"a61bcb55358884984889bfa85557c9fb2e9c454d","sha256":"fd0ed2fa282d322c5c02a009811c6b28eb6509d4d9b247c6bdfc39a8c315d884","sha512":"9d01ca1ae45df9d3a959dce1875e4624291ee8903f75e4539408debaf618f30a9cda81aafd38c5e36205f81d8cabfef76d6e05db0f26b8f4bcffc9edf3262062","ssdeep":"","tlshash":"8411a8f6e283583c47489aa392b7482ad07e5b35a98118f2a21a0673d80f76722144b5","first_seen":"2025-10-27T20:35:54.218603Z","last_seen":"2026-05-30T07:42:56.642543Z","times_seen":7,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/mine_active.png?d=1773682207140","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/mine_active.png?d=1773682207140 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 871\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-367\"\r\nexpires: Wed, 15 Apr 2026 17:30:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Bmjwd2FUO9RQ7qImEf%2FIihIfz2KdbRee7j30pOmgherN6v4uWTc1MAmvF8Hmxyg862b2nOi1ig6emySBLtroEiEFX5uJ%2BZQ%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be2d9b6acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"4dd212f759c5fd1c98c5cbbdc8ef44eb","sha1":"4adbc6c0bd0d9b6196bdc32798d12157a4db0916","sha256":"99366c1933127aa1e831254d821e71acd0f31840f5728af827a1f45685236a05","sha512":"1371c351695e7c431dc34df35c1e33e6baec0f9c288d8832e0fe086c3ab72aba05af17c649f78bc3f16ad4692468daa8d0c5471077a2e0b0658734e3cb0af67f","ssdeep":"","tlshash":"8c11b7c25e301f2c620a22a8b8ac80d090e6da90596e37de3487bc3843a709cd259b16","first_seen":"2025-10-27T20:35:54.200747Z","last_seen":"2026-05-30T07:42:56.613133Z","times_seen":7,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/css/app.a1c06371.css","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /css/app.a1c06371.css HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e438-16f96\"\r\nexpires: Tue, 17 Mar 2026 01:29:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 14424\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1%2BavmG%2FYVhSxquE74X8AkQzG4NELa7cDLOz46UQCEqcROtvww1WlgYRJLnhbBygwCJdiZxfr9eHejIhW86dAUjftniWJHXJMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd57be46a31acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94102,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c9258da29e8ed863ef1f455f41cf2702","sha1":"5954ee4d88d4df8b55aae9db37af6557129e09b1","sha256":"5a09ffae6564eeb965d44d74f9294aab25aaaa7ba531dec88fa3d6699056ef26","sha512":"6922800f2d7cb20e609133b9aadf875c10aedfa6fe44edfa14e94bde0aaf4ee83a6890bfc2a07d581b2f2c91e58db9a3d933fe78f77f59e6ca8341445bec3268","ssdeep":"768:BVQ7zqPswVxpqJFqVrwG5kw2/ttZyZZM1rVTzrHCsydfR+kLMH//D:Y3qxx+yjqoi/D","tlshash":"9e9373327b1e2419a47bc45a38e4eacc206ca713d1424b6eea167777cec72c73976748","first_seen":"2025-11-16T18:14:38.158889Z","last_seen":"2026-03-21T11:41:13.254915Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/xuanfei/address","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"OPTIONS /api/xuanfei/address HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://yhxca.vip/\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=apE8maelJtKHnElmxxZNeweIPW%2FNte3O1LHfNh0T8nM6fnyPbbLhdCHcCiR8G%2Bw9WtZ92OBPEiLyOWEVE%2BeZ0Xg3ZyVolWUyrjVeBs0%3D\"}]}\r\ncf-ray: 9dd57be8ef7aacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/system/config","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"OPTIONS /api/system/config HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://yhxca.vip/\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qJiL4t2C2HKxNIP%2FVLWrLIWgx%2Bwf0qR4YEV4Jm88xIOeYUBfWc1UcnGOK7TOS3N5p6OBgGzXpVg7SJh4vRSd2i%2FZQK5rYfXkFzSWgw0%3D\"}]}\r\ncf-ray: 9dd57bed985dacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/video_active.png?d=1773682207137","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/video_active.png?d=1773682207137 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 870\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-366\"\r\nexpires: Wed, 15 Apr 2026 17:30:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c6%2BcuBIRwvKk2GoqrGudf8MGc6hrw1BUSa61RLMOHoeAMmTcjKIGRn2R7IBk0yRI6b0lKy7AGexv7AlwnAQip2rYvR3Rk%2BHFgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be2d9b1acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"2a0bd26207878bcc1b06e863a676b758","sha1":"76e0e435fb3346dc39669a936220b36053267668","sha256":"5d2a6da53b89e3a7249b3095fca71dfc9c3aab0ab00c65f57b5aa67454dfc518","sha512":"e5bcd22397fd21984d655c7b10963551a4023389d65fed5a4dd7e5f0e29cc349dbdfe8297911a60e58b2848ea763833b443751c974d9871ee963fb6bb1906f78","ssdeep":"","tlshash":"d11163d153221c314cc43b116949428bb796077d1517dad8b5bafc268207f446e4524b","first_seen":"2025-10-27T20:35:54.201455Z","last_seen":"2026-05-30T07:42:56.618273Z","times_seen":7,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/home_active.png?d=1773682208070","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/home_active.png?d=1773682208070 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/js/app.fa079982.js","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:06.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /js/app.fa079982.js HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e438-3db78\"\r\nexpires: Tue, 17 Mar 2026 05:29:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 41\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FiMJZaANgNNqFGXEHQIZfQ%2FgGAuQL69mx78Aj5S8tZ17cvRLIsNi49GKRoa66gjiuB33bp%2F%2F3IE8bGTs1LBET17ySHCS8tld%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd57bdea88facd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252792,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63948), with no line terminators","md5":"57017da3d2fa56ae0258c364fe35e94e","sha1":"26f5c10bdf1f2dfd99f37b91245ba7beb74007b4","sha256":"96b25eaa6d6e992a13c201da0247fb6bb7601c21528d7a594d31a65735cdce5c","sha512":"dd2108ae023909efec9de002b5d9b2b586e9ca9d9800a6544c401f7a1bbc1e688cd9c6ce9b93f6041b2cbab0062feefc67ed3884a22fff69e24134b5534dc939","ssdeep":"3072:5c8GwHT2L+NVpjq9HH1gva53AAfaNNopZj6w63ptEv:5FPD+9Hy6QAfaNCmw63pU","tlshash":"eb44f847d180df751bb562e1700e12e5f2a829d6a44a848eff39f9c8328ef5d521e4bc","first_seen":"2026-03-16T17:30:35.932413Z","last_seen":"2026-03-16T17:30:35.932413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/js/app.fa079982.js","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /js/app.fa079982.js HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e438-3db78\"\r\nexpires: Tue, 17 Mar 2026 05:29:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 42\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ztb31yh12vYtWGy7kIK3e3ev8%2F6XG%2Bk2VGqgBdpgqpdQKkbJJn6Y2RlDr6ASbxnMzVI2Bz5w5y0FLaVvbL0%2FfQbpXKO8c5iMbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd57be47a36acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252792,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63948), with no line terminators","md5":"6710ec3f7b4a5b65bcbad365baa6e3b5","sha1":"69ea17fffa4aea207b9623bb67bf532e7238d755","sha256":"d044d088bbe736198cf0d95a97da035ad267dad68378e13bf4fa695915714c75","sha512":"999374e3fc0e84f48de0b237f84ac0c88d6a28ec769e1ba62589e5f40f5574bc6f8537c50cb64bb5184fe7307d784ac03919c1a1bb75adb3e1593906697cb424","ssdeep":"3072:5c8GwHT2L+NVpjq9HH1gva53AAfaNNopZxiNcoJ7:5FPD+9Hy6QAfaNCxecoJ7","tlshash":"56342b4b9581dd291fb151e1701a12f5f2a829dbb44ac48eff3ce98812cef9d520e5bc","first_seen":"2026-03-16T17:29:59.526855Z","last_seen":"2026-03-21T11:41:13.250997Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/system/base","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"OPTIONS /api/system/base HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://yhxca.vip/\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FTbtQ9WbGWNM3F9dhQoyIdP6AWiY8eFniG0ZdEWQWd8ppJYgXcIYpFaohyJvYGZi9L9IRzirt45UNsrgI17hfc1XywUPosuiRDs%2BWw%3D\"}]}\r\ncf-ray: 9dd57be8ef7bacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/mine/duihuan.png","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/mine/duihuan.png HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 1936\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-790\"\r\nexpires: Wed, 15 Apr 2026 17:29:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YdyKItJP3K%2BYXRuS%2BS2lRFvFJsWfEeMzOKomWINpe8fAuYfH5bAfunOs%2BvAMn7MPQRjc4rA4ywWsMXupvg9N9I4bMJyi81UfYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be28980acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0d003fa7ba6080492a0aed8b9245e9dd","sha1":"21d8aa100590617ddd3ef6f2e86f0d0c4968b035","sha256":"f5e21d5d6994ce4ae6df8374b7887ffccad3f88d974b6f08277cd3bfffafb3fe","sha512":"fadfd51f97509d598f58422c45c295571b7f7108731f7c2489f05917b6c9b1106184a5f042a381c6c04b8a0b19ee2eb92ad954fb4fc9f5149b9d9dac1a48397b","ssdeep":"","tlshash":"dc412a2d9722c56c83b6525eaf1101ffcf9e6aa88c62add9b0c8462c248999d2917c60","first_seen":"2025-10-27T20:35:54.191173Z","last_seen":"2026-05-30T07:42:56.626401Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/home/vip.png","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/home/vip.png HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 2913\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-b61\"\r\nexpires: Wed, 15 Apr 2026 17:29:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 40\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CciZXYy%2B4E8FI8A0BjfJU8raLvR0qoOJ%2BJgU8Ini1P0acwmdwNj5pExfs1IJ1pFOOrj1hlHTfUovx9qF0YP%2FZgG%2FybeOwqm1tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be86f43acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"622494c44529c6a50255f64a8d19c6ad","sha1":"5d81b5297f5cbf62e407a3d4fb4587efc405f328","sha256":"78c4ce9bfad0974e9d1abe8c0c20c82e6c32676a83924038123579819f8a9b02","sha512":"a77ea2073f3c0e7d43cbe7359f1b0335df5740c44aaa6c4f2d4b86abcd31f52b3a0b0e7fe63d87f7ae187e31a00bc56bad4477cadcc1ccdd18cfed98ca2a28db","ssdeep":"","tlshash":"9f516da1099cf28cc7bc3428e9294a1fc150f506eabe68dc143a1d8e894d6cb4c70636","first_seen":"2025-10-27T20:35:54.217922Z","last_seen":"2026-05-30T07:42:56.653976Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/system/base","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"OPTIONS /api/system/base HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://yhxca.vip/\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTkpic7juKdpqVWzxLNHEf2t6wogTyz6gRgu1pnyROlP9iqBmuEwS3SuOXEWPgpyyBZgmVbK8CokPsGJbvIdbr%2Bhbd9%2BVquCoykrJ6g%3D\"}]}\r\ncf-ray: 9dd57be8ff7eacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/system/base","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /api/system/base HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: vn_vn\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RLHaN0VfH4G2M7Hpo2F0a9yqC3uBM%2FD6ZqkolHJx3kHEiud6Z8WlVoqqSlzTI44f5A7o%2FlAL5JEikj8IQlZSZ2%2BAxxMsEq4ejTkEmnc%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dd57bea4fb2acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18315,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d18828e52d4d5b4ec6f667a3c55ba4ca","sha1":"2050099ed02a883d81341210fd088cec0350ed2f","sha256":"87a55a8a9a7e088e115fcc0648e8cb06306bb5e7668c7914fede39b444cac282","sha512":"2bacfdc238ae47597b6d654892e58d398a5f0afabfa09aa468ab9c9b56200ac5afc55448c08b208846f6d84dd4db6be9550c2a1e6edcf168d871f9d24881e334","ssdeep":"384:qsNWzbzIAwnDFeLsmjh+j1OTUGcCw9EYR06YBVgbd/wWoYYT:vWzbzIAwnDFe4mEcTeZ67yuT","tlshash":"b2822d8250121bccea1e6b027e9f9edb8367c4af3d671ccd83ca41495a2275bb19758c","first_seen":"2026-03-16T17:29:59.534494Z","last_seen":"2026-03-21T11:41:13.26738Z","times_seen":3,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/xuanfei/xuanfeilist?page=1","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"OPTIONS /api/xuanfei/xuanfeilist?page=1 HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://yhxca.vip/\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fCCov5IGPyQfRxbQcUukkuYYRm7%2FcXKKdhVpjDCuolfOm1owhmEUL%2Bv0V3SKEPysgQc%2Fx73Z44k%2BinRnVuNzPug57JLp6ELM3E1ckVM%3D\"}]}\r\ncf-ray: 9dd57becb82bacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip//xuanfei/20241018/90c7fc0fd11329146f90c79871c275cc.jpg","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET //xuanfei/20241018/90c7fc0fd11329146f90c79871c275cc.jpg HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 175896\r\nlast-modified: Thu, 17 Oct 2024 18:20:46 GMT\r\netag: \"6711557e-2af18\"\r\nexpires: Wed, 15 Apr 2026 17:29:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: language,token,access-control-allow-credentials,access-control-allow-origin\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5swrpdraSJdqEHQWLBkTtSkxZQRFMcBoMNN6RMWUP0XiGKgDOupWtvT1Kj%2FhUwoGwTrWiNOy%2Fur71q4At6h%2BPFgEiNuvvWOG81kl%2Bo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57bf18923acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175896,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1145x1280, components 3","md5":"1c493936f8619525090772a8a156bac0","sha1":"95e06583aeb1473ef097eea33bf4b934b75058f4","sha256":"123a9380f7c5e2112564a0f3bb7c92aa6bb22c810fb2138c4dfcdb75b1ab3e1c","sha512":"18c413607a200a5baad82f87d1077c14807031d7f031dc01c952a08bf631d63395d9a4d232a879a6d5a73f3583e8fdcfa0f3fbe9bd0b0174869ef3f608d9631d","ssdeep":"3072:zWe9RG7fVLRPhVc4vwnkE+NKGw7+wxb/GXYI/7+ELP/5/iy:zWejIRfc4vKiKGwrOXh/7+EEy","tlshash":"8f04132153ff1c2dd5e8308102699afce7bdb198aa10497636587e1884f70b4a7f9dc9","first_seen":"2025-11-16T18:14:38.186739Z","last_seen":"2026-03-21T11:41:13.278804Z","times_seen":5,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/lottery/banner/20250622/9d2adcde89f2d74dabb71c289a9518a6.png","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /lottery/banner/20250622/9d2adcde89f2d74dabb71c289a9518a6.png HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 707801\r\nlast-modified: Sun, 22 Jun 2025 12:59:57 GMT\r\netag: \"6857fe4d-accd9\"\r\nexpires: Wed, 15 Apr 2026 17:29:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: language,token,access-control-allow-credentials,access-control-allow-origin\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKwLyFBhTjQiJzoDrJg9HOtXASrVEKBDmR9rTlmU8H%2BoIaIA348ssp0JOEHGSy5%2BjHtlGh2MewS5ej0Zu%2Fo%2FGALIoi3DrZGNOEgqTs8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57bf2896aacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":707801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 580, 8-bit/color RGBA, non-interlaced","md5":"bc7dce289cef2135b7f8e7f7f1e20822","sha1":"ff697703393ea8aac83508dd3330f014a1e2aa5a","sha256":"c2099530be0560cd69b31338f14ce0fe870d102a88eba8e2a7b7817c809c74a5","sha512":"5c3c7a87a61df2281ba202fbc981b9c446f172795fd05f096d977cb748f056ebb029f311d02e220578f4c3f29ff6beec0c3f603adf1e1a88c6daff41ff35ad88","ssdeep":"12288:KYKUe9OLlhkFBP/ziwcpQhHi4uuhiDt7WHQZVLHd9PPuj5NI6VhWdxYYkLgfQNT0:gUZLX8BHlHhHicI7NvLHzSNI6bExYhkT","tlshash":"5ee4335ba8ece1a4c781eb6e70cf0814c74525b5a70708d973987fab12bcca57e235c9","first_seen":"2025-11-16T18:14:38.156444Z","last_seen":"2026-03-21T11:41:13.258145Z","times_seen":5,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/system/base","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"172.67.214.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"OPTIONS /api/system/base HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://yhxca.vip/\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hpcdfn7tCayeWCuBp1ArF%2BCkv1rq8BRN4PNuzrYKGyHyVaP9S0V22onz%2Fi9blT%2BJXlIApmMMnY9DgBJx6Fa3wMoBUmQmQJPd1bcZZ4M%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dd57be39b13a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":67,"dns":1,"connect":9,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/fonts/Times_New_Roman.e2f6bf4e.ttf","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /fonts/Times_New_Roman.e2f6bf4e.ttf HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/css/app.a1c06371.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 68372\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-10b14\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 42\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=seuOuVBrm3Wk97Jxt3%2FtiOGDZbEZKTQt5eWw392u7%2Bo4vocANOQ%2BaoJSL%2FvJ3tOPpkRya9pEZ8%2BtCDplaEDflkjbPz06MeX8VQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be4fa63acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68372,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 24 names, Macintosh","md5":"e2f6bf4ef7c6443cbb0ae33f1c1a9ccc","sha1":"78f02dbda3abc563e972f7d26ff26ba6abd738d9","sha256":"78ceba0105d46a592b9c84f7dc2ee802c4645c591fd7eadd1972f5663b3c4c4f","sha512":"b151ab962a1437dcc3d89f027ce44712a9fc06e2eea0526ffbd02b7f1d3b43e088cd8d9d9ac15cb234afa9cb7d95970000194bc23e89f244eb0a2bc2f2d8b91e","ssdeep":"1536:nS0C4VuCbepU0I2UXM4cfIeELWw/tw4anoD2llS2N2LhfT3yW:S0C4VuNpBI2UX2fIeELnraoDoS2N2Lhb","tlshash":"3963ae15d3ea8e19d9b1b131c928b36a4bb4e80dd7becf3f7b4a1843c50899c9d11239","first_seen":"2023-08-13T05:49:29Z","last_seen":"2026-07-27T09:33:16.750771Z","times_seen":53,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/system/base","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /api/system/base HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: vn_vn\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2j20iX%2BzlxuZwuH9ZQ3iOfjZeKznoBnUJhbSk7LmcQCDHKciZOf3DLXEIMdKJAzIIN6evrMN%2BlhKS%2BQ27IYFZWYSr6Wl2OVpOFF5I4c%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dd57bea3fb1acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18315,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d18828e52d4d5b4ec6f667a3c55ba4ca","sha1":"2050099ed02a883d81341210fd088cec0350ed2f","sha256":"87a55a8a9a7e088e115fcc0648e8cb06306bb5e7668c7914fede39b444cac282","sha512":"2bacfdc238ae47597b6d654892e58d398a5f0afabfa09aa468ab9c9b56200ac5afc55448c08b208846f6d84dd4db6be9550c2a1e6edcf168d871f9d24881e334","ssdeep":"384:qsNWzbzIAwnDFeLsmjh+j1OTUGcCw9EYR06YBVgbd/wWoYYT:vWzbzIAwnDFe4mEcTeZ67yuT","tlshash":"b2822d8250121bccea1e6b027e9f9edb8367c4af3d671ccd83ca41495a2275bb19758c","first_seen":"2026-03-16T17:29:59.534494Z","last_seen":"2026-03-21T11:41:13.26738Z","times_seen":3,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/xuanfei/xuanfeilist?page=1","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /api/xuanfei/xuanfeilist?page=1 HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: vn_vn\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZZo2MeSuvAdpyAwUwjG3avdQPXHUK%2FRkDg0k%2FKVT1gfqxmfR8TUAmc1IwBm2NQM7Nbb7U6aevFFH37pTojb1Y65H90DV4HR%2FTCdvBQ%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dd57beed8bcacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8349,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0ecb8b4b76f1dc082d0ab5684501b5a7","sha1":"f81fdab82fe00d20b9919f5a1e61ac3b976e93b0","sha256":"47c9cae8069c9db7f63d3e67a58428de7702904745e27b4f343d3018ca7710fa","sha512":"b64056902e007ab3e45f945d61b524513940cb30a7c6777ca8df6d04d142603f01f8dbe55d51cb09e439fb5802860921cbe4ec84f5f2200a49cf1604dc75c855","ssdeep":"192:9fbEJWPOPQ4VUsVzAO6PzBRVUqdmYOdG9WE:9oEPOPQfsBAdPNoqdm/dG9WE","tlshash":"b902c64710111beee026ef033d662fbe0be084ba208725f8a9eddc1c658177fa46d199","first_seen":"2026-03-16T17:29:59.53016Z","last_seen":"2026-03-21T11:41:13.270666Z","times_seen":3,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/Lottery/hotLottery","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"OPTIONS /api/Lottery/hotLottery HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://yhxca.vip/\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9SzoIbMwhtfBCOf98C11LYYNs51w3%2BvjSUMb3Dby%2FHV3LAaA4p0Rxi4pYj1rFSkua2gLLP6fBo4dzzaxZoZ7Jdc6kOycFPvSR7NPtU%3D\"}]}\r\ncf-ray: 9dd57bf14918acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip//xuanfei/20240714/a6f36da3faac29ad3bf7f0a6aa894b56.jpg","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET //xuanfei/20240714/a6f36da3faac29ad3bf7f0a6aa894b56.jpg HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 139788\r\nlast-modified: Sun, 14 Jul 2024 15:57:12 GMT\r\netag: \"6693f558-2220c\"\r\nexpires: Wed, 15 Apr 2026 17:29:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: language,token,access-control-allow-credentials,access-control-allow-origin\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXIitFa2uD2akk%2BDIzIflLKg8QgdIDt7R8njFHMf%2F4aEWFZELyXMH5hquG2XRRhmsQmQNDXabG86wPCyWStDUsASHN1FasDKKhH%2BM0Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57bf19926acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139788,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1044x1280, components 3","md5":"e5c3ae1aa4e04eafddf6fb10ba6723d3","sha1":"d3c9286e42752de8b67cbc0219e746e47b4fc085","sha256":"95a84014f617c877c2f8abb766f506fa7c3be7cf9ac5fc032d896143a1bf90c8","sha512":"afb300314fdd38ada183c0d7b384da789f8a3e948f43331838d337709524b88749ba057a0d2037debc65753a5257c0e7591e96692402b128284154422ffb159c","ssdeep":"3072:1zT97GqpsDTjmJLZlvcf6tgUht5pdFbvKALR/2HsYE:xT5TpifmY61LvBLAHsYE","tlshash":"3bd313ef2efba130d17a64b411e95b3dc284b60eb388bfb817560b1725b0e5107577a2","first_seen":"2025-11-16T18:14:38.164063Z","last_seen":"2026-03-21T11:41:13.278261Z","times_seen":6,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip//xuanfei/20240715/9e95f3e2b91bcb25c3d5e0dc5f6de243.jpg","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET //xuanfei/20240715/9e95f3e2b91bcb25c3d5e0dc5f6de243.jpg HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 115478\r\nlast-modified: Mon, 15 Jul 2024 12:31:35 GMT\r\netag: \"669516a7-1c316\"\r\nexpires: Wed, 15 Apr 2026 17:29:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: language,token,access-control-allow-credentials,access-control-allow-origin\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=afKogfqx4g4DFTkRYNTNvLMso%2BXhFTYOfu6gVm6xJrEFnq%2Byv9dXh8xA0vwa0DJAdoAJfXt8dpy4RytJABH4bqoVugsfsErJ9ETavn8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57bf1992aacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115478,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1045x1280, components 3","md5":"e29067af34b2950bc409a90312f8fcc1","sha1":"a072a74a1a4e80ab874ebfb85a99c65888ae4181","sha256":"99e816cfeebc8c099320a913a7353e0ad826d7be5e1b6c5cc486e56fc78bfbb5","sha512":"98c1c828b17c5c7a5e8c42381b78be82763e37e22dc605dccb3bbf2297ae6a5becd0067d8758610c751acf950bf6a790870bad857036b63600691a98a5126a86","ssdeep":"3072:oM2GwdQlNl7G5ozTqsPI4yElejNcI9PQK0nt4L4wIENrP9KRfAr:mdQle5ozTqsQiIxUt4MEp9KRor","tlshash":"4db3124ccdd74160deac2a32c5e26fe08a1b3d223e3b7707d44de9866009336abbd565","first_seen":"2025-11-16T18:14:38.182574Z","last_seen":"2026-03-21T11:41:13.257085Z","times_seen":5,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-16T17:30:06.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 17:30:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTopkdfHM8POxU2BBQgVK04WsxpiBQq113K8HsFTNfltGqR%2BS5J9qkQcP7WWW47hrm58lBCD72wu90HKOoMrE%2BT1aPNcETpSWg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dd57bdc6803adee-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2714,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2713), with no line terminators","md5":"8979ffc207b422fc219ef60a526e90d4","sha1":"30bd9e7032074381f34235b5e01a6b343901320d","sha256":"08e79bfb605c7bff68f24e6b2673c01a7b7638889ad02b22a78a0f4f9123216f","sha512":"baa552fdee9037603e26fb07c903d66c79d5670adf6b56d386f5209f44d8ab7d225fb37d317b3465fad1753ebac80e07a041f1767f786551669a04f9e4a0332c","ssdeep":"","tlshash":"dd515747e810cc1c3a309154a64ff84b8eae945fc2248c50e2da51cd4d94fd0cda7ba3","first_seen":"2026-03-16T17:29:59.536243Z","last_seen":"2026-03-21T11:41:13.264741Z","times_seen":3,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":29,"dns":1,"connect":8,"send":0,"wait":200,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/home/like_active.png","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/home/like_active.png HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 1727\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-6bf\"\r\nexpires: Wed, 15 Apr 2026 17:29:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2TJ83fUzenK4kbuJevwynOyuzi8WDTCMnfZxtzASfLadqk6k0mRH29019BYwWRUBfQAZzEHMr3Bh2wf1sDJKuK98i%2Fc72PT7wg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be28986acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"2c730da5e1a738a4b25a6413a9c29217","sha1":"37d617970a1c5bb415bf36363006e0744498ce65","sha256":"fe45ac8900fba5d5b86779c48e42060b6680d15837d925986db8612853a73c8d","sha512":"ab7f4d8a6f0ea79b79ee1b81883f1670d1da3132ffc58c5ed5038852b4d1836ec42b5f4d74ddcd3c6f7ce947aa573a3195d67b7f9bb4254b56912e8283f08b3a","ssdeep":"","tlshash":"05310ba25754f778cfd0e8b129199b1359a312dbf6464c61483bc5784d118f14a683e7","first_seen":"2025-10-27T20:35:54.203688Z","last_seen":"2026-05-30T07:42:56.612122Z","times_seen":7,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/css/chunk-vendors.bc00c5ff.css","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /css/chunk-vendors.bc00c5ff.css HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e438-3169a\"\r\nexpires: Tue, 17 Mar 2026 01:29:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 14424\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VvjUubsDB5ZU7jHqGX0tpBewHOvSpDJy1AeNLjmnCfvNp%2FLzvP%2FcBIqHGfOcOuADOmSH4fZOnWmEIJBa1K%2BeANj1uWRWm9kbig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd57be47a35acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202394,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b5e9c4c1c3afdebae1cc9050ae9643d4","sha1":"88e88a3dfc42670671745cb0ee5db9220a0bfd23","sha256":"080b7f78f900a47397ff89a17ead6b7148b54cca8e5e986b537ad21e2d701c5f","sha512":"3b1bf2e4cd2b9f0e87bca410b06b507217458270bf7f5d40daca96ef2ab6dc3e75634705efcd84c6cb0f5eb147a1799c72af3ec2be74b07413fe59b664b169ff","ssdeep":"6144:u09Sqfp/D/6YNDOWXEFdKjGm2N6wwJCDDV94:u0dD/NR","tlshash":"3314f867a28017ec632bcd109fc0e7d4c338e422e5525ae9f1127a2dcfdbb8511a775a","first_seen":"2025-10-27T20:35:54.212436Z","last_seen":"2026-05-30T07:42:56.64577Z","times_seen":8,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/home/notice.png","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/home/notice.png HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 3554\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-de2\"\r\nexpires: Wed, 15 Apr 2026 17:29:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 40\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAsKTrdKAhEYogYmXqrX35191lVmbOpgo%2FoSYVou4H9XLfgQ9lvFAMW%2FbdeGi38eWD5zYAvzYB00X%2B7kbo%2FTK8OKa%2Bk6aZCH3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be86f40acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"19ad1bfb3ff1df455126cc3b84724629","sha1":"da7e036a7d1ff70509f4a7a3996ac4dbe59e1800","sha256":"dd340555096bb537db2cebc40b64abc4129c3bb407a202141fc9532a1a2e1904","sha512":"34e51183a63abec8b6ba442d0b90ea82e7120901b7c306359363bd0fd088b753dde9063c3c13c9d90041dd06963ffc7d3f4bb59a0394d02819e9c8387783d2b1","ssdeep":"","tlshash":"d3713c7879bd9e48ed11e77a3f55e37ce244943eef63568431c32908c62a51c7a70421","first_seen":"2025-10-27T20:35:54.196994Z","last_seen":"2026-05-30T07:42:56.640961Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/mine_active.png?d=1773682208082","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/mine_active.png?d=1773682208082 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 871\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-367\"\r\nexpires: Wed, 15 Apr 2026 17:30:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2AHOGXJkA0aQjbX%2FGzAVmYT0oZYY6VQnK2szvEwQmDhpvemaNEoWEwbWvB%2B8%2BQl73W3zJUnAAkaR7athpIqoSo9axZVe6V1y0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be89f60acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"4dd212f759c5fd1c98c5cbbdc8ef44eb","sha1":"4adbc6c0bd0d9b6196bdc32798d12157a4db0916","sha256":"99366c1933127aa1e831254d821e71acd0f31840f5728af827a1f45685236a05","sha512":"1371c351695e7c431dc34df35c1e33e6baec0f9c288d8832e0fe086c3ab72aba05af17c649f78bc3f16ad4692468daa8d0c5471077a2e0b0658734e3cb0af67f","ssdeep":"","tlshash":"8c11b7c25e301f2c620a22a8b8ac80d090e6da90596e37de3487bc3843a709cd259b16","first_seen":"2025-10-27T20:35:54.200747Z","last_seen":"2026-05-30T07:42:56.613133Z","times_seen":7,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/Lottery/hotLottery","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /api/Lottery/hotLottery HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: vn_vn\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fr%2F7HjzlxRPIuGOKZWPtxqc4jogl8XTqpqNBPNhf%2BT%2FTo7IZsd%2FmQfR5z7U5t5xtev9hnQd%2FNeYdIUQkgkuJj7h5xEEdBKnAUsiJOL0%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dd57bf2996cacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1663,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"458ae0364859548dd2a3f4c73aaff500","sha1":"b8bc00b9d2360586548408e39e3bd1b86f5e970c","sha256":"7bb8ea2aadf083d0b557b2017d6ad52dd9425b77b10b2d13b47be2604a7a8d0e","sha512":"4a0e798970d78e46c0186fc421a8a6f25371e24902e6c3316462dc59bfe177a12c3619994201f3094ca6fcb65a42b1fbf7a1f8eefbdbc8e5610a06eef402502e","ssdeep":"","tlshash":"0a3110298d170bacf5268f131d7e85ad1bf141be18e7544599d989bad00723ab086d28","first_seen":"2026-03-16T17:29:59.531727Z","last_seen":"2026-03-21T11:41:13.259289Z","times_seen":3,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/time_active.png?d=1773682207133","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/time_active.png?d=1773682207133 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 8382\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-20be\"\r\nexpires: Wed, 15 Apr 2026 17:30:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NO4LC9xGKay94qRodCDuHLy3Hzq6I0EDoWKlRpXk9r9XhOnrNRYz21cmj9UPHj%2BrxVvvmKYK%2FVg%2BtlJLCRuLNf0pJnHLmgWVSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be2c9abacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8382,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"1446e310e1f81e584117985f98e55a3c","sha1":"7c8d50e2acfb75375313580ba7f398d3f40eca93","sha256":"b5bf91dcf61e78a84bffd7e9571e8f1feb735f91b4025103e72c077c8b57ebfe","sha512":"5a9012ff9235b08a5946a31a5f68bcb58d96a786161891a2bb371e53cb2d5c5bfb7e5737c91c06ecd6883fe7d88a1b882a3e01235ec71e28f97c44fe701ca85b","ssdeep":"192:vAs6/pz9IWnAUK6kT7blSRTzA1eYJCSiB6HKtjr02O4wyX:Ghnn5KvblSRKe2CSXKtjIl9yX","tlshash":"a9029d4ded975129c18333572d7648f4ed3e24303ea2e3c675d9b37622ca29b182da72","first_seen":"2025-09-25T10:27:16.463412Z","last_seen":"2026-05-30T07:42:56.639532Z","times_seen":9,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/time_active.png?d=1773682208072","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/time_active.png?d=1773682208072 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8382\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-20be\"\r\nexpires: Wed, 15 Apr 2026 17:30:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uLfih%2By4ZANHPxFKiwdi%2F2jrvgksCPAU%2B%2BiVGEGdiR76l0O7E1%2FFQ3%2FnOqPoJFLEUFwZaiUeQN%2BxuTv2O94DX9nEyAGZBYfjPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be88f59acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8382,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"1446e310e1f81e584117985f98e55a3c","sha1":"7c8d50e2acfb75375313580ba7f398d3f40eca93","sha256":"b5bf91dcf61e78a84bffd7e9571e8f1feb735f91b4025103e72c077c8b57ebfe","sha512":"5a9012ff9235b08a5946a31a5f68bcb58d96a786161891a2bb371e53cb2d5c5bfb7e5737c91c06ecd6883fe7d88a1b882a3e01235ec71e28f97c44fe701ca85b","ssdeep":"192:vAs6/pz9IWnAUK6kT7blSRTzA1eYJCSiB6HKtjr02O4wyX:Ghnn5KvblSRKe2CSXKtjIl9yX","tlshash":"a9029d4ded975129c18333572d7648f4ed3e24303ea2e3c675d9b37622ca29b182da72","first_seen":"2025-09-25T10:27:16.463412Z","last_seen":"2026-05-30T07:42:56.639532Z","times_seen":9,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/video_active.png?d=1773682208079","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/video_active.png?d=1773682208079 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 870\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-366\"\r\nexpires: Wed, 15 Apr 2026 17:30:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l7NG%2BQrQ%2Bq4%2BcIR%2FmKdHShC4c9%2BgnwJUzER%2BNKHeBRhU1mxs0iM%2FJizC%2FwO8hfIVKYsMhjfFHlS1IIHbNisuMz8zyBpRodUybQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be89f5dacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"2a0bd26207878bcc1b06e863a676b758","sha1":"76e0e435fb3346dc39669a936220b36053267668","sha256":"5d2a6da53b89e3a7249b3095fca71dfc9c3aab0ab00c65f57b5aa67454dfc518","sha512":"e5bcd22397fd21984d655c7b10963551a4023389d65fed5a4dd7e5f0e29cc349dbdfe8297911a60e58b2848ea763833b443751c974d9871ee963fb6bb1906f78","ssdeep":"","tlshash":"d11163d153221c314cc43b116949428bb796077d1517dad8b5bafc268207f446e4524b","first_seen":"2025-10-27T20:35:54.201455Z","last_seen":"2026-05-30T07:42:56.618273Z","times_seen":7,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip//xuanfei/20240714/1eb187eeb9ddee580423740a78bb67b8.jpg","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET //xuanfei/20240714/1eb187eeb9ddee580423740a78bb67b8.jpg HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 125708\r\nlast-modified: Sun, 14 Jul 2024 16:04:29 GMT\r\netag: \"6693f70d-1eb0c\"\r\nexpires: Wed, 15 Apr 2026 17:29:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: language,token,access-control-allow-credentials,access-control-allow-origin\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NhupDmcNDFyaNVpnCtZNDra3DtmRUzuFcwb2lO4MAxPdg7KI4MsJb%2FhV2qMXpX%2FvzjUp26euB%2BU7qfvd5K5ffnYUzmZVZUYZRcC5jqI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57bf19927acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125708,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1044x1280, components 3","md5":"8dd6f44d38b09a245f0ff4b1b716c2a6","sha1":"3567ec3ce29c3661cea12df7865c675a3b5fb530","sha256":"5d5a9ee872d71363a124ce3d6d02cfed73c84db6b3836c00d0c91c74b4cb130c","sha512":"6ae9b501b38ddff6bcd446197a5b09f1a88364c4d36a6f621c381e6a4f95569298ea14b1130d6e9c045bd3609eedeb31b3633ff614c43239001681142397e315","ssdeep":"3072:EOPpQ7bQCA/Ds7JFMwxK/x4vHYqY+jqDbI1KeU:JPpQXx8WJCwx2xw9RqXIa","tlshash":"afc312161e0e4236eee8397bd1d0ac66ebd2694e43d4e442f9522e2cf462fc5396cf11","first_seen":"2025-11-16T18:14:38.181089Z","last_seen":"2026-03-21T11:41:13.280539Z","times_seen":5,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/mine_active.png?d=1773682207139","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/mine_active.png?d=1773682207139 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 871\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-367\"\r\nexpires: Wed, 15 Apr 2026 17:30:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vP57Vo8kdGTwZ5O5BES4k30IaTvFijO5bo3Lb%2BRrugy%2BynooQbX%2FETkXfz9bpy8Nyz%2FtOGuUyHFfWiSkLeUusuuQ0Kn0LGe%2FXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be2d9b4acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"4dd212f759c5fd1c98c5cbbdc8ef44eb","sha1":"4adbc6c0bd0d9b6196bdc32798d12157a4db0916","sha256":"99366c1933127aa1e831254d821e71acd0f31840f5728af827a1f45685236a05","sha512":"1371c351695e7c431dc34df35c1e33e6baec0f9c288d8832e0fe086c3ab72aba05af17c649f78bc3f16ad4692468daa8d0c5471077a2e0b0658734e3cb0af67f","ssdeep":"","tlshash":"8c11b7c25e301f2c620a22a8b8ac80d090e6da90596e37de3487bc3843a709cd259b16","first_seen":"2025-10-27T20:35:54.200747Z","last_seen":"2026-05-30T07:42:56.613133Z","times_seen":7,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/system/base","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"172.67.214.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"OPTIONS /api/system/base HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://yhxca.vip/\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1sFuW%2Fm9YIlFI7okecRxolEAVECOo2lhABgeKeR%2BdRJ1dQXXj3Un7tfqsxqfyZSi4pPRmpmIf91hecLu1uMRkGwu0OVeNnGb6zLbT8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dd57be3ab1ba106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":67,"dns":1,"connect":8,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvBEJ%2Fv2iJ911gNTIEYDeZDbcaWFbF0HQIV%2B%2FqshHccc9eE%2FLI2mt8pREuO2XF9IlODM%2BVhAhRbzwZrPG1Lm%2BWmopK42Ol20og%3D%3D\"}]}\r\ncf-ray: 9dd57be319ceacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2714,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2713), with no line terminators","md5":"8979ffc207b422fc219ef60a526e90d4","sha1":"30bd9e7032074381f34235b5e01a6b343901320d","sha256":"08e79bfb605c7bff68f24e6b2673c01a7b7638889ad02b22a78a0f4f9123216f","sha512":"baa552fdee9037603e26fb07c903d66c79d5670adf6b56d386f5209f44d8ab7d225fb37d317b3465fad1753ebac80e07a041f1767f786551669a04f9e4a0332c","ssdeep":"","tlshash":"dd515747e810cc1c3a309154a64ff84b8eae945fc2248c50e2da51cd4d94fd0cda7ba3","first_seen":"2026-03-16T17:29:59.536243Z","last_seen":"2026-03-21T11:41:13.264741Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/xuanfei/address","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"172.67.214.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"OPTIONS /api/xuanfei/address HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://yhxca.vip/\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=diw9VUsaQN0b2qb%2BAAj%2BMp%2Fbsf3AwM1hlMBbTenxve80WUZ68aEuWvW6hGg2AKJyZK7KSdD5VzJOGo4EGuAyVCnr%2BbxBnhKX4kOE0o0%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dd57be39afda106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":64,"dns":1,"connect":9,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/time_active.png?d=1773682208073","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/time_active.png?d=1773682208073 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 8382\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-20be\"\r\nexpires: Wed, 15 Apr 2026 17:30:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5cEe14k3DTnFUe%2FR1oCDCd%2FJNnPwIK4Si7lI0bP39B62mgE23O5jw4sxuS1WkGRGzPmVEsapvtS5%2FuMUpgm2%2F%2F7F9oy01bVb4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be89f5aacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8382,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"1446e310e1f81e584117985f98e55a3c","sha1":"7c8d50e2acfb75375313580ba7f398d3f40eca93","sha256":"b5bf91dcf61e78a84bffd7e9571e8f1feb735f91b4025103e72c077c8b57ebfe","sha512":"5a9012ff9235b08a5946a31a5f68bcb58d96a786161891a2bb371e53cb2d5c5bfb7e5737c91c06ecd6883fe7d88a1b882a3e01235ec71e28f97c44fe701ca85b","ssdeep":"192:vAs6/pz9IWnAUK6kT7blSRTzA1eYJCSiB6HKtjr02O4wyX:Ghnn5KvblSRKe2CSXKtjIl9yX","tlshash":"a9029d4ded975129c18333572d7648f4ed3e24303ea2e3c675d9b37622ca29b182da72","first_seen":"2025-09-25T10:27:16.463412Z","last_seen":"2026-05-30T07:42:56.639532Z","times_seen":9,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/system/config","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"OPTIONS /api/system/config HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://yhxca.vip/\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ec9qqc5HifITDdZky2qJ0H2mpMWx0BakuyjbrihJwy9ER%2F80lkwiKT3oz0r%2BNEFz9EaEzUfz53JyqH1ezJ%2BdgcQW%2BIC7LcCZ%2FWXsQw8%3D\"}]}\r\ncf-ray: 9dd57becb82cacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/home/like_active.png","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/home/like_active.png HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 1727\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-6bf\"\r\nexpires: Wed, 15 Apr 2026 17:29:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 40\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gD6FSdt1iC6Bdr1VbWpy9XEuh2oaLWVCwsEqwL9ztHPUMMjGFK8nri2gCyAM3mRpLYv%2BWQxotPzQt7DfNu%2BGoaVQRo5Qmiqrkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be86f41acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"2c730da5e1a738a4b25a6413a9c29217","sha1":"37d617970a1c5bb415bf36363006e0744498ce65","sha256":"fe45ac8900fba5d5b86779c48e42060b6680d15837d925986db8612853a73c8d","sha512":"ab7f4d8a6f0ea79b79ee1b81883f1670d1da3132ffc58c5ed5038852b4d1836ec42b5f4d74ddcd3c6f7ce947aa573a3195d67b7f9bb4254b56912e8283f08b3a","ssdeep":"","tlshash":"05310ba25754f778cfd0e8b129199b1359a312dbf6464c61483bc5784d118f14a683e7","first_seen":"2025-10-27T20:35:54.203688Z","last_seen":"2026-05-30T07:42:56.612122Z","times_seen":7,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/video_active.png?d=1773682208080","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/video_active.png?d=1773682208080 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 870\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-366\"\r\nexpires: Wed, 15 Apr 2026 17:30:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJnzDFHhz360xfFmV2DV39dd7Cwt72pTP06281umidXFl68EaYnODKZUZeQcQLqgGS5Xs7co3aL7xFmC5LeikzmFqZLqrUT8RQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be89f5facd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"2a0bd26207878bcc1b06e863a676b758","sha1":"76e0e435fb3346dc39669a936220b36053267668","sha256":"5d2a6da53b89e3a7249b3095fca71dfc9c3aab0ab00c65f57b5aa67454dfc518","sha512":"e5bcd22397fd21984d655c7b10963551a4023389d65fed5a4dd7e5f0e29cc349dbdfe8297911a60e58b2848ea763833b443751c974d9871ee963fb6bb1906f78","ssdeep":"","tlshash":"d11163d153221c314cc43b116949428bb796077d1517dad8b5bafc268207f446e4524b","first_seen":"2025-10-27T20:35:54.201455Z","last_seen":"2026-05-30T07:42:56.618273Z","times_seen":7,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/Lottery/hotLottery","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"OPTIONS /api/Lottery/hotLottery HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://yhxca.vip/\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBA88q4hk7MpDHjKxmvinDs2grMv8Y%2FRna1z93ckiGT%2FSzItIYiFQapkvuXwIZ6MHnZUFMIFhijtkJadrsDhZ0mpIDj0%2FVaVknJq5B0%3D\"}]}\r\ncf-ray: 9dd57bf2d99aacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/mine/duihuan.png","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/mine/duihuan.png HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 1936\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-790\"\r\nexpires: Wed, 15 Apr 2026 17:29:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 40\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iP1sMp8tZd3%2FpXqvFayOC5TY8lnc04isbtKMTK9%2FRu8yFeUCfpA1vytAoiJTpqsCMLwRnERg%2FZJW3lxux64xQiOPk2YRUIsCyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be85f3eacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0d003fa7ba6080492a0aed8b9245e9dd","sha1":"21d8aa100590617ddd3ef6f2e86f0d0c4968b035","sha256":"f5e21d5d6994ce4ae6df8374b7887ffccad3f88d974b6f08277cd3bfffafb3fe","sha512":"fadfd51f97509d598f58422c45c295571b7f7108731f7c2489f05917b6c9b1106184a5f042a381c6c04b8a0b19ee2eb92ad954fb4fc9f5149b9d9dac1a48397b","ssdeep":"","tlshash":"dc412a2d9722c56c83b6525eaf1101ffcf9e6aa88c62add9b0c8462c248999d2917c60","first_seen":"2025-10-27T20:35:54.191173Z","last_seen":"2026-05-30T07:42:56.626401Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/like_active.png?d=1773682208077","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/like_active.png?d=1773682208077 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 1727\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-6bf\"\r\nexpires: Wed, 15 Apr 2026 17:30:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySjb1BrwJMEncEgU7oV0ITZ8HtS7wMNIkW319HxdoCB%2BgnysbOw5atsgX12PBS%2B%2B6FlMwIdxBD9bW1gLDYQDfG1XPayGUxkqLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be89f5bacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"2c730da5e1a738a4b25a6413a9c29217","sha1":"37d617970a1c5bb415bf36363006e0744498ce65","sha256":"fe45ac8900fba5d5b86779c48e42060b6680d15837d925986db8612853a73c8d","sha512":"ab7f4d8a6f0ea79b79ee1b81883f1670d1da3132ffc58c5ed5038852b4d1836ec42b5f4d74ddcd3c6f7ce947aa573a3195d67b7f9bb4254b56912e8283f08b3a","ssdeep":"","tlshash":"05310ba25754f778cfd0e8b129199b1359a312dbf6464c61483bc5784d118f14a683e7","first_seen":"2025-10-27T20:35:54.203688Z","last_seen":"2026-05-30T07:42:56.612122Z","times_seen":7,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip//xuanfei/20241018/53c195b75fcab1ee3d74e0478fe10322.jpg","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET //xuanfei/20241018/53c195b75fcab1ee3d74e0478fe10322.jpg HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 137167\r\nlast-modified: Thu, 17 Oct 2024 18:32:32 GMT\r\netag: \"67115840-217cf\"\r\nexpires: Wed, 15 Apr 2026 17:29:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: language,token,access-control-allow-credentials,access-control-allow-origin\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gzE%2FdRLBFFLSfDK2Jg%2FqB4DNB6OaIDNuAkgTONHrJR8esdYDVAIMzJfxlAPQinMQvfgNbTeJIUr4EtQfd4gboqMGUhdDb5PYrbbDGyE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57bf19925acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137167,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 982x1280, components 3","md5":"e7359d864c70cbc6f7c583aef0d15e37","sha1":"6bdcf4a771b8c40e798661b98dd8ece20c890c0e","sha256":"e1cb2afb3a352580823c00454046dcff74bab8ba5367dfabe87c7b49a8c4fa73","sha512":"329135914e5c0d3b6fdc5ddca824bb8ebda0c20c383ae7aac1f61bb7c3514e001ec071febd7aa8f8da91d88737ab9d73544359a8ecd4a2ccb2ef7b004202eec4","ssdeep":"3072:lzy8NXfno1pUpq2XxCOfgRtw+WSm8vucA/lTjhwdGYk9iOjl:5NXf/xCvRMSmmuz/B9wdG9rl","tlshash":"5bd3122d8e8527d8516029079510cdfa2612f5d26cdc378232fdcdb9a9d747eccab2d8","first_seen":"2025-11-16T18:14:38.162335Z","last_seen":"2026-03-21T11:41:13.274252Z","times_seen":6,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/Lottery/hotLottery","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /api/Lottery/hotLottery HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: vn_vn\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:10 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e6QuwmFcT6%2BQZ4iBEtrIRFxNhiyT1hb2YGNwnnNzDahImbmYLNN86zPmR15LHBJjFqg%2BjQ1mg1pz9IKP5w7MLWToiWVpXou7WSMXjyM%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dd57bf419d2acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1663,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"458ae0364859548dd2a3f4c73aaff500","sha1":"b8bc00b9d2360586548408e39e3bd1b86f5e970c","sha256":"7bb8ea2aadf083d0b557b2017d6ad52dd9425b77b10b2d13b47be2604a7a8d0e","sha512":"4a0e798970d78e46c0186fc421a8a6f25371e24902e6c3316462dc59bfe177a12c3619994201f3094ca6fcb65a42b1fbf7a1f8eefbdbc8e5610a06eef402502e","ssdeep":"","tlshash":"0a3110298d170bacf5268f131d7e85ad1bf141be18e7544599d989bad00723ab086d28","first_seen":"2026-03-16T17:29:59.531727Z","last_seen":"2026-03-21T11:41:13.259289Z","times_seen":3,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/home/vip.png","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/home/vip.png HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 2913\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-b61\"\r\nexpires: Wed, 15 Apr 2026 17:29:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMq1T%2FSymywseUiIJLznv%2FauNPjXqJ%2Fet3B0TD9%2Fuv3q2Q%2FH71LfkFixeE83%2F%2B2h%2B%2B0nmjtfYwbr8NIwvQ45%2BA1bjMtbx6cBFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be2998dacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"622494c44529c6a50255f64a8d19c6ad","sha1":"5d81b5297f5cbf62e407a3d4fb4587efc405f328","sha256":"78c4ce9bfad0974e9d1abe8c0c20c82e6c32676a83924038123579819f8a9b02","sha512":"a77ea2073f3c0e7d43cbe7359f1b0335df5740c44aaa6c4f2d4b86abcd31f52b3a0b0e7fe63d87f7ae187e31a00bc56bad4477cadcc1ccdd18cfed98ca2a28db","ssdeep":"","tlshash":"9f516da1099cf28cc7bc3428e9294a1fc150f506eabe68dc143a1d8e894d6cb4c70636","first_seen":"2025-10-27T20:35:54.217922Z","last_seen":"2026-05-30T07:42:56.653976Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/img/footer/home_active.png?d=1773682207130","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /img/footer/home_active.png?d=1773682207130 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/Home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 1025\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-401\"\r\nexpires: Wed, 15 Apr 2026 17:30:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SW1XXWSG2%2FJ%2FsX%2Bb24Ksqj8CZIFHsfi9T%2FCc7q5hyq2f6bfqRKKKrx4KiLswLQIrQqo5papHcmsN331TFmgwdua9lUr4rPD2PA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57be2a99facd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"85e15a83c93c2d44079eb1c0f82b98a2","sha1":"a61bcb55358884984889bfa85557c9fb2e9c454d","sha256":"fd0ed2fa282d322c5c02a009811c6b28eb6509d4d9b247c6bdfc39a8c315d884","sha512":"9d01ca1ae45df9d3a959dce1875e4624291ee8903f75e4539408debaf618f30a9cda81aafd38c5e36205f81d8cabfef76d6e05db0f26b8f4bcffc9edf3262062","ssdeep":"","tlshash":"8411a8f6e283583c47489aa392b7482ad07e5b35a98118f2a21a0673d80f76722144b5","first_seen":"2025-10-27T20:35:54.218603Z","last_seen":"2026-05-30T07:42:56.642543Z","times_seen":7,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/system/base","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"172.67.214.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /api/system/base HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: vn_vn\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8yQ9rjsEYZdpbvk5CYIWJgETHWewM1fjfd9MGSLwsqgSVID5WMEbNfZ4BpVgp4sa9WsO%2BgvgxyKyWjwmI1lUN%2BITqcM9e1TQl7eCzE4%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9dd57be4feefa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18315,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d18828e52d4d5b4ec6f667a3c55ba4ca","sha1":"2050099ed02a883d81341210fd088cec0350ed2f","sha256":"87a55a8a9a7e088e115fcc0648e8cb06306bb5e7668c7914fede39b444cac282","sha512":"2bacfdc238ae47597b6d654892e58d398a5f0afabfa09aa468ab9c9b56200ac5afc55448c08b208846f6d84dd4db6be9550c2a1e6edcf168d871f9d24881e334","ssdeep":"384:qsNWzbzIAwnDFeLsmjh+j1OTUGcCw9EYR06YBVgbd/wWoYYT:vWzbzIAwnDFe4mEcTeZ67yuT","tlshash":"b2822d8250121bccea1e6b027e9f9edb8367c4af3d671ccd83ca41495a2275bb19758c","first_seen":"2026-03-16T17:29:59.534494Z","last_seen":"2026-03-21T11:41:13.26738Z","times_seen":3,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/xuanfei/xuanfeilist?page=1","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"OPTIONS /api/xuanfei/xuanfeilist?page=1 HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://yhxca.vip/\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ATEJOCjAK6qvmHxOFGNAv3xmaq2K%2FOf8%2BOqMz5xF0CElvFzQfBnJFMKHZb98sBFKBDogmv0pgUONBc%2BhrODsQTktDyJOk7dH9kdqw90%3D\"}]}\r\ncf-ray: 9dd57bed985cacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T06:57:30.598852Z","times_seen":17831909,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip//xuanfei/20240715/9acac9be53d590969ec5b18cae4859c6.jpg","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET //xuanfei/20240715/9acac9be53d590969ec5b18cae4859c6.jpg HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 165628\r\nlast-modified: Mon, 15 Jul 2024 12:24:12 GMT\r\netag: \"669514ec-286fc\"\r\nexpires: Wed, 15 Apr 2026 17:29:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: language,token,access-control-allow-credentials,access-control-allow-origin\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulErd5uSUpW5yF5G83y0p1NsHIp9fWDjR86a5PI3V66yaJTmKDiK9WGO8by%2FIQ57EWbgPPUX7%2FgWBtMY1Wvdz1KzD71VBHz8jq2Nvgs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57bf19929acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165628,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1033x1280, components 3","md5":"0e2055fbe2d6ca6975ebed4edcaff816","sha1":"fa502d8619dc0c56430d991840757a1a0882b453","sha256":"ecf860a15041e251e72672b75783a462257a1200ead4fede77413f5b2a7f8bf1","sha512":"59ba700a5960de5c08e135b4cc63d1ad44742bf006ecd29cf9904c4eb593a591ff124958432a20537c5c02e0e554421b0816a74d984b6b2eee1b40dd9a0de95f","ssdeep":"3072:RKeHYvxYy2XyeVDOHYH46jc4Tx9ZiXRncaoy3vrZ3syR4f4BTcr7j5dGla7QrLmh:RqjSycSr4V9ZiXRnSGt8yRS4JQ7j546l","tlshash":"17f31293c7625a7df813e1fe6bd3d2e4ed9cf525c281a03544d730839612361ec8aae9","first_seen":"2025-11-16T18:14:38.189747Z","last_seen":"2026-03-21T11:41:13.276683Z","times_seen":6,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/system/base","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"172.67.214.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /api/system/base HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: vn_vn\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EofhtRPYTx9JuEKhOIyEdMcaXuPD4PgDAHPj3%2FygMSueskf%2FyzZbf2b%2BAgxJFbm1i7q8p9VTDRc5KIZtPRySDsF35xBMfFyDZkYNwIw%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9dd57be4fee4a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18315,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d18828e52d4d5b4ec6f667a3c55ba4ca","sha1":"2050099ed02a883d81341210fd088cec0350ed2f","sha256":"87a55a8a9a7e088e115fcc0648e8cb06306bb5e7668c7914fede39b444cac282","sha512":"2bacfdc238ae47597b6d654892e58d398a5f0afabfa09aa468ab9c9b56200ac5afc55448c08b208846f6d84dd4db6be9550c2a1e6edcf168d871f9d24881e334","ssdeep":"384:qsNWzbzIAwnDFeLsmjh+j1OTUGcCw9EYR06YBVgbd/wWoYYT:vWzbzIAwnDFe4mEcTeZ67yuT","tlshash":"b2822d8250121bccea1e6b027e9f9edb8367c4af3d671ccd83ca41495a2275bb19758c","first_seen":"2026-03-16T17:29:59.534494Z","last_seen":"2026-03-21T11:41:13.26738Z","times_seen":3,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/system/config","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /api/system/config HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: vn_vn\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pm2qYTJuSguFiNZvp00o%2FQ6h0i1B5ewFDNX9q5s7Q%2Fh43QMDCUwNcNzTS3XZmreMkLltf8KHxE8dnzBQltRi%2BDgifq8sl364oe2gyJQ%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dd57bee2887acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147799,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7223e7b28feec012e013e18bb8bd1b85","sha1":"0a0170995674a02cef19f8b52841fd8d5c3a186a","sha256":"a73376bdd5a9e3f8784ac7f8f9f8930b9679421fc9a7915382fcf97bab6fa270","sha512":"a7875a709cf9e023489c435c542bc80bb17e1fe47ea1fb0eb5efdc3294b8221a4a264ef0b3eb0eaec72105e7904b5591120b1c647e735d6702cfe4901de9a829","ssdeep":"768:OSejm3NrlSVgzRorLh4PVs+xXo+u8EIUgtfzqg7mN4EI+4r4Y0qmouTwo8/K4kOy:+I9lSVYV4+uxIto4EqzK4B6GLU","tlshash":"05e319fb9c972bf8d13d6b272c5a4a9bc661c86629510f1cca4c9c0e9072b3355f0add","first_seen":"2026-03-16T17:29:59.528832Z","last_seen":"2026-03-21T11:41:13.268225Z","times_seen":3,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip//xuanfei/20241018/332e2e3ef4bc4295268a3b333fe6ea8d.jpg","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET //xuanfei/20241018/332e2e3ef4bc4295268a3b333fe6ea8d.jpg HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64930\r\nlast-modified: Thu, 17 Oct 2024 18:25:14 GMT\r\netag: \"6711568a-fda2\"\r\nexpires: Wed, 15 Apr 2026 17:29:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: language,token,access-control-allow-credentials,access-control-allow-origin\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61ymBBYfzT7jqIVNMRJi%2FMsn1A0BLK1wX9KDnpsdvIkh6dnjcVUeEflty6EpGahAvrV%2Bd5qENi0kcdurNIa0tifDBNuZiD1G35sg%2BNo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57bf19924acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64930,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x1179, components 3","md5":"ac2c132ba605d70162cc09959ff3a4b2","sha1":"76017e5e9a5ba89af1d47b80d3cc5b9c7335851a","sha256":"fb7c3eccd4c01a80c5eeac093454b7e79c9d0c03ab6a20998ac85d34ddfa4c21","sha512":"d606bab914c547c03e0846c6f7867a5357abf620a2f96b820524068273487c8097352620186171fd9e9f11202cc7908176d59ec4b281ed65828d9c64bfbbbcdc","ssdeep":"1536:QTI3YeaKwifRfs0+gxxL1V56PQHzE5t6RJi:Q0Ie+ARfM0X5m0zE5t6Xi","tlshash":"91530182c9b0a709f7c3fbb97edf24226732050cc133e8a2911665e469e51b77a5cdd2","first_seen":"2025-11-16T18:14:38.191215Z","last_seen":"2026-03-21T11:41:13.277413Z","times_seen":5,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip//xuanfei/20240715/c650b2326d333e130651a41ca799b0fe.jpg","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET //xuanfei/20240715/c650b2326d333e130651a41ca799b0fe.jpg HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 359396\r\nlast-modified: Mon, 15 Jul 2024 12:37:38 GMT\r\netag: \"66951812-57be4\"\r\nexpires: Wed, 15 Apr 2026 17:29:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: language,token,access-control-allow-credentials,access-control-allow-origin\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BeJzML%2BHiDzc1j8O7CupCZYiTPSDsE9wTOmqY8jW8DNU6tBGCL%2BSkq65hlVQrL8GDDlFgg9vznYGgKVrdxavAssJYHOOFMaNLBH%2BIVY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57bf1a92bacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359396,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1043x1280, components 3","md5":"c268f84f5342977da06226a60f2ff6ac","sha1":"64677850a43e451384939da3407252d057d897d5","sha256":"50e99ad747c052839e90006a51230d1308ee40b5504e10489d709650b35dc2ab","sha512":"f6ade2178bdc10575bdce6dba0b3b93c351f3595b407d13af0489d823774978312960ba94bda635c4ef47a22e5cc9deb201b69d8c0d716e166ccec70947e3225","ssdeep":"6144:zKzNZMgvnNV/AiR6RVyW4V5Kdyu2Xinn/rydfaw3RMuUKdmwhVBOY62Dvb:mz7Nvnf+Vr0kyurefpMuUKjhVF6Avb","tlshash":"2f7423c28db6248aea21b678737c4bf441233247725d9bef32b3d36259f0c49d519e64","first_seen":"2025-11-16T18:14:38.135004Z","last_seen":"2026-03-21T11:41:13.269638Z","times_seen":6,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/css/chunk-vendors.bc00c5ff.css","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:06.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /css/chunk-vendors.bc00c5ff.css HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e438-3169a\"\r\nexpires: Tue, 17 Mar 2026 01:29:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 14423\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zqIXaw%2BIKLof9FqRegQwtfYH1gmaB1wkZe%2BRVdLv%2BB%2B6J1xvscD1IWUqu0efeYxZqLp8msVcOLCdAdY7Re2r0TW%2FwRxnVXLFfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd57bde988aacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202394,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b5e9c4c1c3afdebae1cc9050ae9643d4","sha1":"88e88a3dfc42670671745cb0ee5db9220a0bfd23","sha256":"080b7f78f900a47397ff89a17ead6b7148b54cca8e5e986b537ad21e2d701c5f","sha512":"3b1bf2e4cd2b9f0e87bca410b06b507217458270bf7f5d40daca96ef2ab6dc3e75634705efcd84c6cb0f5eb147a1799c72af3ec2be74b07413fe59b664b169ff","ssdeep":"6144:u09Sqfp/D/6YNDOWXEFdKjGm2N6wwJCDDV94:u0dD/NR","tlshash":"3314f867a28017ec632bcd109fc0e7d4c338e422e5525ae9f1127a2dcfdbb8511a775a","first_seen":"2025-10-27T20:35:54.212436Z","last_seen":"2026-05-30T07:42:56.64577Z","times_seen":8,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/api/xuanfei/address","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:08.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /api/xuanfei/address HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: vn_vn\r\nOrigin: https://yhxca.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:08 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *, language,token,access-control-allow-credentials,access-control-allow-origin\r\naccess-control-request-method: *\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQmg7ksFkS1%2FzoYdMhk%2FYAxNYj3Ke6qiDemi9RAfYe2nPYcC2nLyOQ1buS5AzbxVSLvLiJf%2F%2F7J25ZRwJlHJLy6eO4E885jKau6t5CY%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dd57bea4fb5acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4113,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3ca15fe43a00de7094b395ea32903e1b","sha1":"555fae9a1419df0ce955a7f2d0f1421977996202","sha256":"bce0e0058bf78c30e9cea9b3fc033c036a413376400650181356f85f07a7a10b","sha512":"0ff05bfcfc813a27ff43f0740cef5a32c447f5393b12595aea5e9f4f33be86dcd25b607d2542882693ac800f4d1d0d4cce8cb12caf4a969815fb2b1d03f68fb6","ssdeep":"96:Ue6AZQqY3OlGFYqpST5z8mT4f9VChMaAUqhPpOMhmO6grm:UApY3OlEM9gmTMdUzMm","tlshash":"1c8173ab1e0748dde58b4e23ed6a1a9507e4403349f30c55faa9bc2e5c291bf720a1cc","first_seen":"2025-11-16T18:14:38.154413Z","last_seen":"2026-03-21T11:41:13.272844Z","times_seen":5,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/fonts/Times_New_Roman.e2f6bf4e.ttf","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:06.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /fonts/Times_New_Roman.e2f6bf4e.ttf HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/css/app.a1c06371.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 68372\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\netag: \"69b3e438-10b14\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GUniOvPmJqBgdFer%2BWorzMokR5J4q9e%2FeITbT0HLVfqyexa8%2BdZMbnGZbGuz7M1xdLVPeulUYei2jSSJGw9urbYv5f2OtbaJYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57bdf38abacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68372,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 24 names, Macintosh","md5":"e2f6bf4ef7c6443cbb0ae33f1c1a9ccc","sha1":"78f02dbda3abc563e972f7d26ff26ba6abd738d9","sha256":"78ceba0105d46a592b9c84f7dc2ee802c4645c591fd7eadd1972f5663b3c4c4f","sha512":"b151ab962a1437dcc3d89f027ce44712a9fc06e2eea0526ffbd02b7f1d3b43e088cd8d9d9ac15cb234afa9cb7d95970000194bc23e89f244eb0a2bc2f2d8b91e","ssdeep":"1536:nS0C4VuCbepU0I2UXM4cfIeELWw/tw4anoD2llS2N2LhfT3yW:S0C4VuNpBI2UX2fIeELnraoDoS2N2Lhb","tlshash":"3963ae15d3ea8e19d9b1b131c928b36a4bb4e80dd7becf3f7b4a1843c50899c9d11239","first_seen":"2023-08-13T05:49:29Z","last_seen":"2026-07-27T09:33:16.750771Z","times_seen":53,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yhxca.vip/favicon.ico?t=2","fqdn":"yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:07.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /favicon.ico?t=2 HTTP/1.1\r\nHost: yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:07 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 13 Mar 2026 10:17:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 39\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69b3e438-1e4c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=utimXMxToDueNrhuTIB22BY6x0HJx6l%2Bzuzjc7RSYbBk8WPtvsJQXuvAlvuImdMtEL6LT47Ed5a71xBGQp%2FEvYb2v%2BH35l6nXg%3D%3D\"}]}\r\ncf-ray: 9dd57be7dec6acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7756,"size_decoded":0,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x200, components 3","md5":"47381aed3d5e5b6566e9bfa04c9e761e","sha1":"12b27fd668077caaf68f1912cb4a1ff8a1a10d44","sha256":"3831bf15ca9107f6f16911e68fb4d46837c655d9677daf806dca9aab4d0ade24","sha512":"509214205c1e992f35268478c692a130e8645ddd59f9ae53b51c911c0319b49c6a1fe2f3a7cba3b2d2fb13881bc93985af55f0b23567c5bfd69c6ca692c8ee1e","ssdeep":"192:kwDxfsYEy76MpnQ5lpe5K/uVuEDDqW4wD3l/J4JYt:kwDVgG1pnGGq0L","tlshash":"1ef17dbe6f898325e00662bfc4d15772ef87b8c722d6151b208a0318389e9e5e47e356","first_seen":"2026-03-16T17:29:59.54421Z","last_seen":"2026-03-21T11:41:13.249228Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.yhxca.vip/lottery/banner/20250622/57d00242c1113510e25d330f9318f82f.png","fqdn":"api.yhxca.vip","domain":"yhxca.vip","tld":"vip"},"ip":{"addr":"104.21.16.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yhxca.vip/","date":"2026-03-16T17:30:09.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yhxca.vip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:35:05 GMT","end":"Fri, 12 Jun 2026 08:35:04 GMT"},"fingerprint":{"sha1":"95:55:08:F9:4E:19:B5:EF:9F:CA:E7:1B:26:87:AF:3E:FD:EC:58:44","sha256":"3E:E0:18:C2:7F:23:27:1C:73:DC:17:96:0E:96:7B:2B:66:35:14:3F:15:45:DA:1B:DA:85:9A:6F:9C:F0:3A:6D"}}},"request":{"raw":"GET /lottery/banner/20250622/57d00242c1113510e25d330f9318f82f.png HTTP/1.1\r\nHost: api.yhxca.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://yhxca.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Mar 2026 17:30:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 822310\r\nlast-modified: Sun, 22 Jun 2025 12:59:41 GMT\r\netag: \"6857fe3d-c8c26\"\r\nexpires: Wed, 15 Apr 2026 17:29:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: language,token,access-control-allow-credentials,access-control-allow-origin\r\naccept-ranges: bytes\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUWLbOXHyl0OUExFrLxfRrqMxkO0zztdGOycfmvrCKcA%2BvCOXamyavs0qLpKFFlYIO9JTxSOTKOzxqegQGz8%2FW54Mq%2Bg9EByB8NcxNA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dd57bf27968acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":822310,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 580, 8-bit/color RGBA, non-interlaced","md5":"e3630f41e829ae737389a4bead70dec1","sha1":"f21e175c55e61fff0da0086db71bb8446a4d3d11","sha256":"9a8413628799a9c84032cb592d91012aa8109cd70df3f002b3cd55be7e99eacd","sha512":"e36d1dd8df0fea64608077f3c38a7c86259ffeb0370c28da49cfcf929aa8b56751f74c7a67746cbace6b4efffd92b0c7081c35a198aa84783ffcee59bb396ae2","ssdeep":"24576:4bv07MgA9QmM7GwGjqTepJiSbdleIImc2eU5:QDoGMeDgmc2eU5","tlshash":"4e0533d1573507a4b1f24f0908fe1daee3dff37a609015670c54b7f4cb6a8e452aaa18","first_seen":"2025-11-16T18:14:38.185393Z","last_seen":"2026-03-21T11:41:13.255745Z","times_seen":5,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}