{"report_id":"d06fad28-5d56-4b5e-815b-2ca3a584737a","version":6,"status":"done","tags":[],"date":"2026-03-14T14:03:45Z","url":{"schema":"https","addr":"jasmine2020.89444794.com/register.html","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"104.21.37.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"title":"Rk elite","dom":{"size":6408,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4964)","md5":"a87ea58a6439ceb68fd725331466901d","sha1":"fd4a8a3aeebbca4850a2b1966c527db7ea8a12d6","sha256":"667fc2913d180b33cb3747901b700d2223df3e5a4b93e912fc14f68ad04c66a8","sha512":"4b7dd56297f314631a07212323c539b1db42774245e2ff1d75a5e32c1e9f250acb69e000663f943c7f3f50912bf13ad0243dc1b2f835d227294cce48891da7f2","ssdeep":"192:JkC2WszNnD1I+C7VdX9kXjLMAOghqI/LPsf/tpfS:lM8VSjLtOhI/LPsf/tpfS","tlshash":"42d1123f416123299027dd684bf4a7138178d8267d6d77fa2512672ad7cbb8205e338b","dom_hash":"domhashc825ac7342d34e339c870e8a2e1df67d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"jasmine2020.89444794.com/register.html","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"104.21.37.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T14:03:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-14","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"www.89444794.com/js/encrypt.js?v=18836","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-14","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"jasmine2020.89444794.com/js/encrypt.js?v=18836","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null},"summary":[{"fqdn":"secure.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":8212,"first_seen":"2012-08-20T19:27:12Z","last_seen":"2026-03-09T14:48:51.455609Z","alert_count":0,"request_count":1,"received_data":2002,"sent_data":716,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-08T22:32:40.618221Z","alert_count":0,"request_count":2,"received_data":210815,"sent_data":939,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":44666,"first_seen":"2017-07-31T05:50:56Z","last_seen":"2026-03-09T12:07:52.08778Z","alert_count":0,"request_count":1,"received_data":1797,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-08T22:29:46.591494Z","alert_count":0,"request_count":2,"received_data":288214,"sent_data":932,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":2,"received_data":63134,"sent_data":1099,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.3830292.com","ip":{"addr":"104.18.28.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-17","domain_rank":0,"first_seen":"2026-02-01T05:58:55.520518Z","last_seen":"2026-03-03T03:23:50.576108Z","alert_count":0,"request_count":7,"received_data":113256,"sent_data":3479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":2,"received_data":15632,"sent_data":1398,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"jasmine2020.89444794.com","ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":10,"received_data":281048,"sent_data":4763,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2026-03-09T10:25:01.023186Z","alert_count":0,"request_count":14,"received_data":1058276,"sent_data":6718,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2026-03-09T21:03:55.071891Z","alert_count":0,"request_count":5,"received_data":21006,"sent_data":3230,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.89444794.com","ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":70,"received_data":25488742,"sent_data":38867,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-08T22:33:42.678774Z","alert_count":0,"request_count":4,"received_data":1076848,"sent_data":1796,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/qrcode.min.0d19c585.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d19c5856e872e3f6fb9d0f57bea8dce","sha1":"ce36bde12504b53d0baebd5ee359631cc5172bad","sha256":"03528877abcd8ec6452eac177f2750c551e57632ac2d855ad5bcd6343891bbc2","sha512":"188cde9b65214ec7d1a4508b462c4251bef7e9a1a9d945535d5cb07b1b07ff4e27988b3eaf5a67af999af17b2737ae04412bb1dce122d44f32590a1123ca4669","ssdeep":"384:2IKSnIPLflpMR++8OiXAAdTRZgMvu4nvqqHHHsglNov3m1xk0ZkGULMyzLyURyy2:GmXimr4niqPDzZuiDy2","tlshash":"0392c4e9f35403a6525d5cc5282e644aa4b0b4272c1641acffb5c4e6e8bcfd1b83af70","size":19442,"data":"","first_seen":"2024-12-01T04:34:39.996683Z","last_seen":"2026-06-08T14:29:32.827168Z","times_seen":2085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@antv/g2@4.2.3/dist/g2.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38ac8e4d3bdf9e4d4590f90f572b57ea","sha1":"79225e15d32c0435c4d12847f5ae89bece312add","sha256":"2cea25f3456374b0b3c31f35c6d9b78e638bc26710e8373d9a383ce703c88d4e","sha512":"dcbcdba45f623d55bc6dbb213b120645598396ffb7da40672d32ebed498b6b16788d2e999783e8b27e76c59d18b39ed5d3f4c69fb312b68ae54e4ab48ef10211","ssdeep":"12288:mLSlPBQyGSFzPOMKwnYgNsJsD7AzcFe4zqWf:m2a3IFfX","tlshash":"d215d9a8719078b1829361e8043f050af23ba86d604f65e9f7a5d9f3ac7d84f1076f76","size":885445,"data":"","first_seen":"2023-03-07T12:04:53Z","last_seen":"2026-06-08T14:29:32.963466Z","times_seen":2316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jasmine2020.89444794.com/js/aboutMerchant.js?v=18836","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"568403915c6cf2c3eecc0a299a35861e","sha1":"bdf3acedc4179c060a0ad0ec73032de39e7c4c0b","sha256":"a1e6867177e1d5a22d21ce39d9af84dfd9464457beb55b923f969f9c66057164","sha512":"4c8bf3dfab872448c88693036e62a98481f8ebc7add84670daab327c3e14142e0a4480d8e251943491346b47a9f88349cc7675c24eefcb85eaa0d858a0e45930","ssdeep":"","tlshash":"d941539eb14bebe205f620822ac56219647360d804b6e4817b569540b47ee4fc25f9cf","size":1984,"data":"","first_seen":"2024-12-22T03:03:41.35822Z","last_seen":"2026-06-08T09:43:18.294344Z","times_seen":469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6c2415c0ace414e5153670314ce99a9","sha1":"5a9eeac34d86e92e5660e0f4f87204f1ed0c8ff6","sha256":"d8f9afbf492e4c139e9d2bcb9ba6ef7c14921eb509fb703bc7a3f911b774eff8","sha512":"de027062931edd07b01842eff24fc15fdbdcaa1af245dcd133155faba9e0c965f0a34dc6144ce3b149bc43b4597073c792cb6dabbfc6168c63095523923bcf77","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKV:/u1zNwcv9qBy1HOg8SMpQ47GKV","tlshash":"9f83f8df77ca702247ab30b9006f550bf276199d684d4400f259d8e9bc78a4a823bf7e","size":87462,"data":"","first_seen":"2023-05-12T23:07:48Z","last_seen":"2026-06-08T20:33:03.418224Z","times_seen":29126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.BGtuIHiN.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"baf9ec3b9bd0945e9bf10427e14bea4e","sha1":"e16e855035b39d06eb58409fa61483afdd0915f0","sha256":"7f17ed0bd0bfc9fc8034664b75f06d7a735d67cbb04b5c4a459baa4092106dc7","sha512":"d103a3ec9947b2cd24196076df4a1e7d8825273b37a88bce600fbd6491396e72616279dc276f1430960a01141d93572d9656a27555b563292d63235a419e7bf8","ssdeep":"1536:UXwfFcel429rLRevECR/fjtDSdDlbM3EvrlxbkZT3BV:UXwBlprLwntG/hvjbkZ3BV","tlshash":"9b73e9e1f296f5399bd3a8e556295103fa363a18785cc270f31cce14219e1c2a1b7f6b","size":78476,"data":"","first_seen":"2026-03-13T10:18:05.453904Z","last_seen":"2026-03-17T23:41:17.862024Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/ac-wps.89824b45.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89824b45a2b94e9b1cc8c694c33f1a67","sha1":"29107254ad8a5c612c61ddfb7aca873dca995799","sha256":"996bbffa52661216998b712c39b0bb7207d45e8f98211cafb3a7c5db0040ec29","sha512":"fb4562aa6f72f4680d73085310ccef27d4ce41e221679019b0c2b0d28ee219cafa2966d10dcf8872c0655ad1bea1f2d3e00cc6a3a346fca87220092c2e8d57fd","ssdeep":"1536:USCAKqw8hylWOdSf+km+XR0w10Ok+KNWHR0cR0uRGvfouzI:UnE","tlshash":"f83333c8f881ad8f7567753acc6f6b1d05377b4de0700eda818b656a1eb144da023be8","size":53049,"data":"","first_seen":"2025-06-26T03:49:13.147356Z","last_seen":"2026-06-02T05:20:54.012464Z","times_seen":1571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/lotto/lott-common/bettingCompress.ee38aabb.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e9473155c92891f4386dd0d8069e9f4","sha1":"9267afe6b0d97cf53172044ae9a42265d9a3d363","sha256":"a0e031682a12d70795625a3dc3b2ef78cb8e1df947e2624b6af6e4c29f51ee1c","sha512":"fca9d9ce963c1d918968709e1d4cde135d229c86f061ebf6424e7795b0f82a387090afec4e53a14f6b08b4b818bccaade875977c4b9240694221c067b5ed9624","ssdeep":"","tlshash":"e611ab5930c1699a12a2f568c90fb31e54664e2012cae018ca1ed88cbe755fa85a2da8","size":863,"data":"","first_seen":"2025-02-23T00:29:24.577675Z","last_seen":"2026-04-08T06:26:49.892621Z","times_seen":2022,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/17660244/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-06-08T16:18:50.73373Z","times_seen":27953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.CUeOvSYr.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f0ebcc724c619c9833a1c112e421d26","sha1":"57cd31d16f718601f3844a3818e37a8f3dd0c141","sha256":"abb77b9109bf46d0b2dbff084b7733ad5abddd4dc65b121ec89d4fe7101eaf24","sha512":"d31e1aac67266848cfe3594d2402fe2f3b23a2a21a2ef23e672e01287512ed50e59dd2483b87c767c31197ed77ef388152a0f93f73ce414368f0cfb44834f11c","ssdeep":"","tlshash":"a8e0cacae3403ce3f5d9dce4c858e9a296f3239643e083a090ce93721310025ce45a02","size":401,"data":"","first_seen":"2026-03-13T10:18:05.334913Z","last_seen":"2026-03-17T23:41:17.890556Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/mc-control-shanshan.0b33d03b.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b33d03be5af326a5a86cfef5ca214cf","sha1":"990a8d1ea03043dea16f6b607c68ae118bc9f608","sha256":"fc2627d9e0a70d9076c06af4b16092a5251e177fba8ab336ed7ad44054a7abd0","sha512":"70a75682fdd3ef9b5a902cad7d7f7e4b048c9c660281a2c2f0a33b432e64989993753f54615df1a65381c47eab13cf2e08fb79b1e6c74a0185c4d5bde035ebb6","ssdeep":"24576:dTWVI2dtzZWX/zHRKNNJoXUdZQVeJcWT8:deI2dtS/zHRKNNJoXUdZQVeJv8","tlshash":"4845194871e661e211777166a05b6605362a7e32c00e0851f2aec9f1afbdd85f333f7a","size":1257637,"data":"","first_seen":"2026-03-13T11:40:16.323274Z","last_seen":"2026-03-18T06:53:02.394424Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f99d3d802f99d44d80f66835e5bf119","sha1":"f4be29be148d53fcb8d71cfc9adac630d2f88252","sha256":"bcc49b843c89115f217f85b564eb83f6ebb96fb49eec5dd7511824743526f1f2","sha512":"d9a191a9d6dd9e7c63105aed31b042556a03a0eb69215838fed41b0000a52c2dac246ec4b5149a59f2f970a83a029cab018d32ba197ef32701db856a2459da8d","ssdeep":"","tlshash":"c5011299fc42b07696963628763bfa07516312251884a4336efec36fef32d87811368c","size":844,"data":"","first_seen":"2025-07-01T02:11:35.33617Z","last_seen":"2026-04-26T14:39:03.222829Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.xhyEK0_l.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c96a39460d2b0a92409b2b92f3da88f9","sha1":"c1ad7e3c7f38743ebadf589676726dad6799a9d5","sha256":"af2012b0cdfa449f186df2f8dc9b3e64b48b8c5c630cc8d3c4df61973499e7c4","sha512":"c6a642b4f09c7dc0b2679c972cc99e4c1e00e268d309aae062883d3eeeb7d3e39bef53388dd20aae7f733da57ed2374c1b12ded0997cbca2762b4b03c332cbfd","ssdeep":"","tlshash":"27a022ca38ca32ae020230300f0f20c0e0b8c02c030e0328800a0200b2300a002ffc3c","size":74,"data":"","first_seen":"2024-06-24T12:34:03Z","last_seen":"2026-06-07T08:09:45.62326Z","times_seen":18421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","size":236,"data":"","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-06-08T08:31:34.943813Z","times_seen":16281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.C_rgEAoe.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1771376dc07da48b3f03339d86d57b7b","sha1":"a5861ebfff23a92ccd1ce6b8a517b6f877d50a63","sha256":"6e148df31d721a0ff08563f2d676751786e01418c86ee54ee8f0e88aa46ae26a","sha512":"6038efed0774fd61c7bf6558d3ea24ccebfada1041fa2c1606263a19f8700043a18f6e368ed550fc61f644eb7b81f8cac01498f30cc56a103295911b28e436b0","ssdeep":"","tlshash":"afc022563060f3a502bb0ed00033e02af32a402cf0ebfa80a65cc4f020630530a26b1b","size":193,"data":"","first_seen":"2024-06-24T12:34:02Z","last_seen":"2026-04-09T10:49:40.045057Z","times_seen":23532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/js/aboutMerchant.js?v=18836","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"568403915c6cf2c3eecc0a299a35861e","sha1":"bdf3acedc4179c060a0ad0ec73032de39e7c4c0b","sha256":"a1e6867177e1d5a22d21ce39d9af84dfd9464457beb55b923f969f9c66057164","sha512":"4c8bf3dfab872448c88693036e62a98481f8ebc7add84670daab327c3e14142e0a4480d8e251943491346b47a9f88349cc7675c24eefcb85eaa0d858a0e45930","ssdeep":"","tlshash":"d941539eb14bebe205f620822ac56219647360d804b6e4817b569540b47ee4fc25f9cf","size":1984,"data":"","first_seen":"2024-12-22T03:03:41.35822Z","last_seen":"2026-06-08T09:43:18.294344Z","times_seen":469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/js/chunk-vendors.e5791b68.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9c799a3a57df2ea9225353174268d7e","sha1":"0291d8a269827bfee0185962ff612eb320cf69e2","sha256":"147954eb8e613c543ce01f1b0c7f62c90085cf40b6b3901146f4177c5a90626c","sha512":"55bb55952338908665bc9d7eb9c0c6032ff2f94ca639f47807326295045d1397e3dd8bb40dd080328e5690d0b9372f4372e47f99cb9bd2efd053c4d2d89f767a","ssdeep":"12288:Y6cyz5imk9iVKnkS6iFYU01GfYR+CfsJPPmNQiAZG9v3X5RhhNWwo4ZpBM/fVNrG:Q6iK1GfYR+bJWNQiAY9v3X5Rlw+IS","tlshash":"276519fc7292b0a607e761f5402f140bb73a1a6b680e8154f265d4e67c7990ec27bf78","size":1446850,"data":"","first_seen":"2026-03-14T14:04:22.061674Z","last_seen":"2026-03-14T14:06:08.5736Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"224cd5e78a4ea8beb491c10fcbe9ff0d","sha1":"4ce36efcaa07253d88e4b632a513793655a7cfeb","sha256":"593fb3e68af17185bf941c5ae204493e7661518d0b9ee513528680d31e133415","sha512":"5d849008538950e2b972aa1f021818b71ffa3a06634970703c78a80861013b40ee2c72d92c510cc8bf9d60747935a306e84111ed0e67700942cdce25e5626f9a","ssdeep":"1536:E5yMuRri7rJdJq1ckNmeuR/bNhPiBwpDoLCPoRMCRUvRAt:E4MuRu7V2XuRjNN8MCSRg","tlshash":"c6a349d67282b03493f785e7a17f6216b33a2918740d8410f17cec6a396a987d177f2e","size":102724,"data":"","first_seen":"2026-03-13T10:18:05.429241Z","last_seen":"2026-03-16T12:25:03.426477Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=17660244\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fwww.89444794.com%2Fregister%3FaffiliateCode%3Djasmine2020\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__ak5no4c07wh","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d9357eee601f7b0cf2362caf7d9a72d","sha1":"bfe5eb8f4e76b84f8440170ba1346ae4237057f7","sha256":"49ac3d221ce027c6d7d8e7e8ceed718557616345f584de0224c56aa5a66a3343","sha512":"e9f2167341e93110a6020e0121dee8b7c1d312c295905b6ff9e511d52e6ffeed9bdb94af91ac9f2569ea25a6c566895a23012da6f12fddea9da1bbd0e44730ef","ssdeep":"","tlshash":"b9f05c13b721817056c2eea85654ba0335f48267901128bd7b2f33c0a50f6884320b4b","size":456,"data":"","first_seen":"2026-03-14T14:04:22.014014Z","last_seen":"2026-03-14T14:04:22.014014Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e875089e8a66f5018932c48c02988533","sha1":"5a6e8b12c9e9d9318f187c64b40918be05fca960","sha256":"71379ef2741e26a506b970bc43e8b80f72229e93047f7967b755c675217de66f","sha512":"6697d1646318316d9365a3e201520d397fd605ad9f084583534127a86be2708a8dda0722b13249be96584b47ad2160020ac7e47e3f2fd111966ca2a1c8ef974d","ssdeep":"","tlshash":"f4f0c22c2ea0f93a805f3c57767ef24832a21519a011e00168cfe81c6567edf8eb9a84","size":574,"data":"","first_seen":"2026-02-02T08:43:50.183545Z","last_seen":"2026-04-08T06:26:49.909742Z","times_seen":299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/mc-wps.47b8a39e.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47b8a39e968333f563334503385a8d3c","sha1":"b1c1889c7ec3ad22b91fbeeaff686948a748ae57","sha256":"7b7a05b24a6c2f6b8b990a1fd37c0138b9eaa72d89911d9173e9f2b2b9f89cc7","sha512":"0e1e9a09449f953e4c0d8468d7a07f90b1e463aa0e75846e83e01d28f360be5c3bdea052bc17f9cf60b65ae8dd7ecb0855464fc5f099426cc8535571dcf8be2a","ssdeep":"768:3J58ixoo2kPZ+Njhts/fiEhiaiOhiBOfJa0A2RfbVd:3J58ixoo2kPZ+IfiEhiaiOhiBOfJL9","tlshash":"ff5366c974c2e8cebb33f53bcc5e7b152935be6945284870415121aa2cf998c9263fed","size":63036,"data":"","first_seen":"2026-01-11T02:47:35.36856Z","last_seen":"2026-05-03T23:32:29.336404Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/promo-ui/assets/chunk/GIFT.Pam_fORI.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6851acd306cf3dbdc40823c829d6199d","sha1":"d2925c8057e00ba1f0d23ee1b18ac0643d5711cc","sha256":"a9c33ca4ecded6e675ff76be1503ad875b9d74a750108e452f2aaee368a5ad3e","sha512":"a34c07a5f3a260523b7f7b4447a810fe69f7ac6ea820a1f428c6c4597d6ece419cc1d67b91238de5ed028b4955212911dd656c3ae4cc43721a1076880be3ba75","ssdeep":"","tlshash":"b0b0120714a5ca18482271c401789657b2094b10743515544048454237a3d2400409b0","size":92,"data":"","first_seen":"2024-07-11T14:40:28Z","last_seen":"2026-06-08T14:29:32.904713Z","times_seen":2189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/qrious@4.0.2/+esm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3f0602cee23a7b0377062a1a341d01b1","sha1":"1460e5e4ecac325960633e79118c96829f1df85d","sha256":"8478c77637d268ea9f88e1aae84dacd031256fb67063a8d94d222cd3eff8f84c","sha512":"7c1c6533f0e924a56239bb1395f6d4fd26cb9e718e355fc5448008da6fa6ca980d9a57e6d427e71e751cb66120dcfe5af1ce80d6b093d5336ab82ea63c0b9dec","ssdeep":"192:NMSJOPXg7hZv1fpYoE8GS9GLhgbHcj/13BBenIhG8+f3/pSq3c/WJBS7SEzonxKl:eSJOPX6wl8GfYUfhpfwcqEhwdlmRvki","tlshash":"a182859673a19269639669d5083f244f82f6e4193418429cfbb2c9dfbd3c4c96039f3a","size":17820,"data":"","first_seen":"2025-04-04T11:34:30.82088Z","last_seen":"2026-06-08T14:29:32.819612Z","times_seen":1997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.3830292.com//TCG_PROD_IMAGES/B2C/libs/gt/boc.js?v=1","fqdn":"images.3830292.com","domain":"3830292.com","tld":"com"},"ip":{"addr":"104.18.28.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"845e2236627b939e57fb462ea29ec554","sha1":"9e3bf49321d552ec26777a8c6d9bf71530f47bef","sha256":"cf2e948263c1ca01e8f6e163439d99a176345e0a41bc93104608f675b2f4145c","sha512":"b3f6919c720eae8d2aa4f12a9657d936c5c52206ca2bcec44920c2d76be5fce6be8e2c5bf1dab20aef890fc11a149321c7199a0e44296f51e7d77878d6dbda39","ssdeep":"384:OcB6Y6+HiaWSXauU058DIml6yDwFJQqVqB:OcB6Y6+H9HII22ze","tlshash":"1852114d68f7609385a3b428ca9fa114b9788a57002ccd85bd4ce3589f9447c9bbbfdc","size":13353,"data":"","first_seen":"2023-06-14T14:59:52Z","last_seen":"2026-06-07T00:59:55.285207Z","times_seen":523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026version=876.0.22.493.790.94.2.26.4.1.4.42.14\u0026x-region=us-south1\u0026group_id=53\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0ed9697fa1363d5aad36f268b7d983f","sha1":"51c6e826c0dafc05dad5cec0f6ac06f91c378fb4","sha256":"c402953cdbb18e6897434300eeda5acc2ee2f26081da8580ea8d3833b8141a95","sha512":"25a3b27fe0abf62de7d6039c838938f3042988c028cae7e3c09bbca8fff4b0e06412ddcdbc39bcd42cf4a5f37a6dea16a52ca145c2fb7695ee0a5653b90679da","ssdeep":"96:JMdHXhQ08bt01bgrd4PJwXtJANvKG88TYFPJvCLq:JMXioIdw5b880LK2","tlshash":"ffb10429834fc8bf6277919963c7b70b35585138b2ec193fe464db34a197283d207daa","size":5547,"data":"","first_seen":"2026-03-04T10:43:05.076873Z","last_seen":"2026-03-18T22:43:16.728861Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/decimal.min.b4a075bd.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4a075bd6623180bb38318dcf2542f58","sha1":"64207af61a67ff855fd152ca4dab1532973e5db2","sha256":"25dd4d16d5fd3c4ac796badcce3ec057d92c52255f8d8481570fb54549dac5f7","sha512":"f20bc2a23070cc656266fd0b654aa6270a0864a3c413fd4ece9bd3630423266829eafc39ef7f32728c97efdc5da834e89c840409e4adc0ed53004897f01341ba","ssdeep":"192:ZusyVYg81fsu05u9gpxe5afH5NVcvqfMNlkdOYiO5PjVYCrF1FVWJK5gDArHx:wsS4OogpxcGHjcwGO5PjVrrrFcJSAArR","tlshash":"1342c5d872b1f0d683f364e040db1406e13a6e49688e61e2f34985e23cb5ec6917ffa5","size":13043,"data":"","first_seen":"2023-03-07T12:04:54Z","last_seen":"2026-06-08T14:29:32.706606Z","times_seen":2302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","size":40,"data":"","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-06-08T08:31:34.94511Z","times_seen":29838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.DlE2yADS.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e2c6c6722cb6693a94d3a8fa813d3e94","sha1":"10b0d5d01ca1303442dd95e58b4527e773f9a64f","sha256":"d2243dc8da94e60651227070409fd3f7a458fb8d1ccd07dad0fd1c57453269c9","sha512":"7309f6664ccb0f2fa432cd42796882cc9fa58837340b331b500d5aca80bba3e0a27485df98035ba5a14a03bbe8ee3c6c680c3b9f97cc8698d0140f0190f1a89c","ssdeep":"1536:EhDt5ZV9vjhC4gPVA2JtszSjt1cK3UVnJzu6:iVf7hIq2mSj3cKEVJp","tlshash":"af434ddef24174355be315f2a06f9106b73a2a2c385cc0b0f629dd9925de04ba227f6d","size":55250,"data":"","first_seen":"2026-03-13T10:18:05.45549Z","last_seen":"2026-03-17T23:41:17.851791Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.Op9ce5aY.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fb56cd26cd62095db75730d3ea823165","sha1":"0ea9e5873b17d40fa4a904a96f2d6e98ad908bc3","sha256":"5fad77850d8a18019ab86b148662e339c37aff0e6136c795254331dfc3cc4252","sha512":"1273c51880bde1777e3a9f9532c0595c46d8cc2e3b4abcf790e9923519d49e96e23f3cdd4d0d40d42ee06d6c01a6dc8d8adc7e0df40052ee1e230627db9e0616","ssdeep":"12288:YEpdABplc/kC8uMQViHTJK1rvYJO6t3/toS6RiQIlMLf+5UqgFp6ey1Q9fBMFO/V:YEpdABpluYdWiqj","tlshash":"4d946be07242f938c7e7c19b90bb160af73d3d09b42e9621f1ade85d33954489267fa4","size":443137,"data":"","first_seen":"2026-03-13T10:18:05.178563Z","last_seen":"2026-03-17T23:41:17.818728Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026version=388cc59aa204dd75bec8ffb1b5c1735d\u0026language=en\u0026x-region=us-south1\u0026group_id=53\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"67c7caaa18894cc920ced3f6ee080006","sha1":"e775b388d4fa6aad612981b92e8d7212360d1764","sha256":"23129724a88e8c64095236b19520bac7343fbc40cd055c480193264257248b74","sha512":"4b92654492feb6bb82a59816b4b908a25a0050510a7f21e4eb34bace7ae1f1ec49147e12c3431b13f06e649417d465626dfbeaa7998719aa19fecc6cd1626cd9","ssdeep":"384:smaZMXVuHnFcC9rizQHoK/pfi3z80CITo5J1sPw:NMHngsTfilCIToqPw","tlshash":"1252b919cf526e7e07a365c6b48fba56f4a950985690043bfccc803c5364bca739fa98","size":13289,"data":"","first_seen":"2026-02-17T10:21:07.188729Z","last_seen":"2026-04-23T02:54:58.169682Z","times_seen":614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@9.3.0/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4570fef97846ca636c3c49463f861552","sha1":"63c164ea279ab2a735d337b255a256bee79da0a9","sha256":"4651353cb061bc4c99cd04687a305193ecc7d4842aabf453914a59eab46781f2","sha512":"bf569392feb91f1548af4f4ccd5e9e30ad9c7580e34bd4a5231c5b91c2a7dc8a4d316d8cf31640e50e2e929f8f4ba74c1f34cb4b1962b35543ea87003f55319a","ssdeep":"1536:EIJAfGWjLP8NE6WG/KxXzbolxU/yBkt+TSD8wkvtnTClvwSmp8Y7CjGEG5/AsVuL:HJjNi+CyBkoBUvwNp8Y7Cji5/5cp5v","tlshash":"7ad309896221b57546e316db93e4c621a3b50540b80ac8f470bd4c9f597ec9813feffa","size":139695,"data":"","first_seen":"2023-05-08T16:47:31Z","last_seen":"2026-06-08T14:29:32.896932Z","times_seen":2385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/external-module.cb963217.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb9632171bda82b786fbb89531ad45f4","sha1":"1b36a6c329ac24c7adfe0e10959f04f4bb325969","sha256":"b7760263cba6848749e6cc9376f0d4dfc3485878240848a526ef56ebd804327d","sha512":"3474e573bae0212524c2a9d4f3a9f76bf7c6c558d6ce004ec307c589d18228b7cf9a51365cc778022dc8dbed81e0d8e43b5683d9f7ed23f2e12fd88a7ba8a4ba","ssdeep":"","tlshash":"e6e055ab0247e5015d32bfc7f003b161b92a1735aee8a8c2055449b297140a3f2da818","size":426,"data":"","first_seen":"2023-05-26T03:36:06Z","last_seen":"2026-06-08T14:29:32.8978Z","times_seen":2277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/lotto/lott-common/lottTranslator.1cbdfa03.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b83901ef304c990d8ac5536d79c6d09a","sha1":"c22ab73bb301e543141ce2bed53380cb71b8db43","sha256":"bb79abf5ddc6d85cfc8321c2acf5e92db2629f2b2eb5d437ce0b07a1f5ec6d99","sha512":"5cf2d7dd44eb1633903a41d11c6807bb92197da2343bcd7f4659753b65a10daff14108b5343b7b838c320617888c343fdda03a10f0479e9a60acd97f54fab441","ssdeep":"12288:InuYcCSbrSPZkSGC7fJCTbPGyxwdIu6JiT22+ki6zx7ok1n9RY:xHbrC7UUIu6JU2Iic2enTY","tlshash":"69453bbe93a62aec0d5db65b4e9b30a1153d0548acf437c2cdac1e1877ccd1da072a67","size":1221251,"data":"","first_seen":"2026-01-02T05:36:01.895852Z","last_seen":"2026-04-08T06:26:50.02431Z","times_seen":476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/9.14.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1133a24e73cc67fbf3a9002a2a8d2039","sha1":"08288a1be66c98dbd60f5d59b4e1b5ee23626085","sha256":"4fbb03aabc125045ee2d98be69199bcc01b9cb22aa2e438ab7422303622e0f09","sha512":"7b038fd80befe61ac54039577b161a7623cbef51f4485e6359c18d25c0d710686c2230def5ee72ea48d906292e2b76085a457c5813bdb6bd49c2d0c6d3bb6992","ssdeep":"1536:BCtUasrm5+7CClwUuDoYIt+/dpN/FZ6zeVjfPLXJpzKZyW:BCtvsrm5+7CClw5DoYIt+LN/FZ6z4jfg","tlshash":"4193a82d3bd5117206b253bc6f1ba486f72e822b2606a2d47cad83e40f7255942f5ff4","size":91683,"data":"","first_seen":"2023-03-09T04:10:18Z","last_seen":"2026-06-08T14:29:32.620194Z","times_seen":2385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/numberSeparator.598de917.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"598de917c7a1390e1b4cc5e65be75eb6","sha1":"8de5f9ebfa6b92d1b42d0086066ba653e094f3dd","sha256":"bdc44edeb986790b38c4c64ee36e5e1fa7b39ffaf89e4e4799f4f315da9a0a0a","sha512":"9895abf61392894b5b8746a0e145a578898c55081c8f3242223986500813fde1aca1f574f01d5dface7710cab4382a132cd861bd99a9b21d2a734933c375a391","ssdeep":"96:GIOVuXQTvvHfyiwCJd+SYgyquFWqSqyEcdpy5FMRSrbEonLmmOKVrxYSEB0:GIOcXYF1JJYTqGCqyZy5FtHEoBtYp0","tlshash":"afe1cd5972e720728a3f30aa5bdf80016531255bb088d9897b1ccf44af52c79c793abe","size":7158,"data":"","first_seen":"2025-11-06T02:56:03.081794Z","last_seen":"2026-04-14T00:24:02.229707Z","times_seen":832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/html2canvas/1.4.1/html2canvas.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7530aa0b7587e627484c49fdf8f13f2","sha1":"b987dc0cc6cfcdc2e34499375f505470c5adb891","sha256":"e87e550794322e574a1fda0c1549a3c70dae5a93d9113417a429016838eab8cb","sha512":"04d6914276096223d2a871c36f9f01d3268f7c2bbe5a076cf06a7f814df792a06d80d4b8b523c7b8689bca87aa315fd326548a75ae855f3a04c981a34defaf5c","ssdeep":"1536:dLkw5M8eKEsqi5xpg+n1sPMecC9JmgxBQSFkkZQRlNM7IgeXzh:dLUtZSpg+aZmabZQz9","tlshash":"121457b46ba71cde0a7ef49b00172d838d981b67117fd1e8f24aada62d70702ceb1574","size":198689,"data":"","first_seen":"2023-03-08T20:20:59Z","last_seen":"2026-06-08T16:54:06.634252Z","times_seen":6139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/js/index.fd066575.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"427c1420ee55600c067416d25be2fc76","sha1":"dbf9fe7ae579d4d94a0c560e74dd6e6937081950","sha256":"a6bc83d95f2e45b342b0f3142927fbe32cc1741e90922c5e0abcaf7c170e8eba","sha512":"6fa87c171bc8ddc7dd3bc346e47829d6fbee59050fd31b2e13c3cbdbe519bf57d9ec130237ff866b15245c6845911ff4ab65b99cc9bbbd016cf68d31bef109c6","ssdeep":"12288:vsGmIyxTKyH5b0ebHtKgxN0dvE0UnIDpV6NfNTxRsD3jX6F:vFmIyl5b0+tRItVIWOF","tlshash":"53657bf9a3d8a1f49303d7e0962b6464366f38fabf81c98093b899c4a77548cc55bdc4","size":1485864,"data":"","first_seen":"2026-03-14T14:04:22.062641Z","last_seen":"2026-03-14T14:06:08.560295Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/promo-ui/index.js?_=1773497000715","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"112af4a535abce46a1027d3f157a1bc9","sha1":"e1514e9fcea58298fbe11f7df686fa11d2917335","sha256":"0a18f72203fe0daca9f47f66b298e8b2faf1ec228834d1b7df911b3cd2582754","sha512":"8dc5b4dabc2326d027f5b803ebc505b107ed5e8231b5c1ab59cb3885e3870f89181e10ebadf8305d51c3654e01f897ab0aeaa4160b1bbb390f411c313344f8e0","ssdeep":"","tlshash":"4111881e9bf780d864bb309f97ae2404329182875021d591355dd8a2ff54da003fdeec","size":875,"data":"","first_seen":"2026-03-04T10:43:05.094527Z","last_seen":"2026-03-17T07:00:36.275287Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/index.js?_=1773497000710","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e7ca135044dd1fbd97ccf3298d0cb84","sha1":"bcf5c83439a66cbc56813f48493857e7cb6a6cd7","sha256":"35132558673cb74430e124e8f346f40442ab02422d47a9cde2e9ef7974609d85","sha512":"f3512ca29fa25e521713912e2a3ea671207b06384d7327568cadbf75e392204a2450790b9ff3db3a042295b95f36024fa6f047be8768cc7dd2fe6a9f8e8c5d4a","ssdeep":"384:ljOIzhu7En2roI1k/WaHjnFw73LeH+whSwoxzYMNwU30CkCPJi4axcNayjL+4ljn:4sBCg6l5CRn5a+AjwE69G","tlshash":"068233562d0f512d0689f5ab78804d6d7eff4ab21ac41d2db2ac8e7cc06d90fa9c93d1","size":19273,"data":"","first_seen":"2026-01-21T14:43:40.798717Z","last_seen":"2026-06-02T05:20:53.842283Z","times_seen":614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/mc-properties.e4564dbe.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4564dbe6cd98596a0ffd61707ab4fd3","sha1":"a8f4f789be46bbdd29d61a3a0d64dcaeb2ade9d6","sha256":"2bcb5954949983c9b986689ff67abe0e63dbd5379bdad60d1453196182062a78","sha512":"cd4c12e5a97b50a10dd02469ea7604508620775c8bfd4346e6953b99a535ff36120b247c80dc49d0f748f2474d564dd9b778980028830a3774a78122ccd73ec3","ssdeep":"24576:z68R0FWACTAMhgRDTbBM1gFVdK5kEBOUUH:zlmWDAMhgRDTbBM1gFVdK5koO7","tlshash":"07d507d80e6fe9a588eea507308d3a3440e87d2296a6c3c1de6e0fdd45c9d7c825177b","size":2969107,"data":"","first_seen":"2026-03-13T11:40:16.324894Z","last_seen":"2026-03-18T06:53:02.399297Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/js/encrypt.js?v=18836","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"600906fff093ac452fd325ec43d60589","sha1":"ec186fbbfd8bea0f5af2d79c3b17b8126360452a","sha256":"d65313dd3770113be6f85c42a1780dc0fc2fc7320d4c8b243428c035ba132e03","sha512":"b932a89314707992a9af7f369ae25ff68a79e814e257834697328c96837ab3563fbb52bbf841a5257ead01a6779249b7bd28135c0d5388adff0147a8f433f745","ssdeep":"1536:iFgw8Kye/AepW5dYrSWsw3uaoeVWG+lirxvYmT8LCRb:igjcw5dYrSWnrxB","tlshash":"af63a8a1a6a06408c3c79b2a771b71eae02e75667cc14c4bf214ff586f88b17f6d1930","size":71894,"data":"","first_seen":"2026-03-14T14:04:21.993803Z","last_seen":"2026-03-14T14:06:08.504022Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-14","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"www.89444794.com/js/encrypt.js?v=18836","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/js/chunk-web-view.f45651e7.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"233072ed54450602cd3a3a1199414a62","sha1":"ea56d8b77bb74c4b58abf6f39eb64f659ff78e8b","sha256":"1352d2fc1921ed25a844c67aaa21fbbd3b196b4571b7991d18f80e6588dcfe13","sha512":"1f9a8d340acf5cdb40723c4567511bc652bdd1f83b1dbe5c3b7e95d0408c5ddcce2aec14a779aaec6230d0a43cd85d9918b98e5129259b3109deafea72b3ed87","ssdeep":"12288:hw4jUORRJhOErW3xeRLV8FNUTyqFLVd6LHgl81zivqqJ:hwVORRJhdvRh8FNUTyqFLVdKHqQzh+","tlshash":"1de42b9eb1c3b1794b736026202f3119b33b2d84641d8854f635d8da79acd5a932bfbc","size":698627,"data":"","first_seen":"2026-03-14T14:04:21.987581Z","last_seen":"2026-03-14T14:06:08.461317Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.DauCqRTj.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e03e26944f34fc23c489daa84e8fb50c","sha1":"fa0c34307b5411bdc2150c1958dbff8d3bf80ca4","sha256":"304ca793ca5c433b23590f0f0e2cb97c88d192768a3d783dec8307d474544592","sha512":"d1a92af80f86a94c190b5d04742fc257fb1b58c5122c7220a840684fd648af122f80bcf58e24d9e338e2de9714b4bf626bba2f5c462bdb7012fbd8f838e7ec62","ssdeep":"","tlshash":"0211dcda3883e0b0d33788cd12ea5071e5385e0821de0080f4e4aece7762b758177d79","size":894,"data":"","first_seen":"2026-03-10T08:28:28.880809Z","last_seen":"2026-03-18T08:07:40.31634Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.QdCjhZDS.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4367e8dbb2241109ce4fab2e5e7645ae","sha1":"a511b81118abf52eec374b30fa149f9e7ce21367","sha256":"2fc8bfe3d41089f8227070d7e05db0dba6d2d5108f9c525a98aa12a34fdb8705","sha512":"46f29c390d5197d4ffc628cf45c501903e8b7515381bcc4135f5007b7b3b17ccc3fd32f7a841ff662aa98fd7b8e97229ca21820be40f3085ebd70eae381e6f65","ssdeep":"192:FZtPwLpcfZyJjChMMuTGUwPPWnwuDfxwhlDDPXXztXijdA2y9NIdwMQD3E4M:FZtzyJKMMDUwPPWXyPzSdA2y9edw14j","tlshash":"ecf108bff741e4b5e3eb88a09e1a0103b93a1654799d80b0f61c4d10a15eac4b277fe7","size":7835,"data":"","first_seen":"2026-03-13T10:18:05.566059Z","last_seen":"2026-03-17T23:41:17.907619Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/ac-control-shanshan.b7303e36.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7303e36dd26c4eb1aae7dad46b56635","sha1":"e8bdbedf8692d0e5be85ecd4ac24026fb9fe6337","sha256":"06f9d9892319f817c918afc4b73a6b568497693062b5f32c91e83e1c3b3227d5","sha512":"301339103c9ee7bdaf527ca96bdce855b2f7fd908ea38cbd5b4d566d2b00dd6a6a4fbd81fa3373b7816f412ea93ed0facf3f3affa694e3f772b609ca4506c8db","ssdeep":"6144:qtDthvN/EL4SfNQUQysILiOMjJ1tA9wRh1TRAzD/Xp8w1PLaqmci7F9Y3YbCOGAE:RiUQzA9wRh1G/Xp8w1n8K7","tlshash":"d0150a08b16715e222bb1172a49f670271666a7bd40a4c95f0bea9f11f7cc887373f36","size":906946,"data":"","first_seen":"2026-01-21T14:43:40.774011Z","last_seen":"2026-06-02T05:20:53.868321Z","times_seen":597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30bfddcdb3764a782b7c8584021d1d6","sha1":"64ed02149d0db57e6c1d68992361d7c1330a663a","sha256":"5a8894efd9ef253bc344f5587ea4fb4f4b8da39d4dbd49a390c2302898411623","sha512":"7f7061097e172e659abcf34d29c148da0bc746fde1307cefa2bcc88ee94db292ba498b3f287a8436b39f9e6d44d5e145350896e447ac7c3cfb281a91a5bc6c97","ssdeep":"","tlshash":"79b09222c200942a24ba8118239fa6073110537a80660c1b143c64a436e610f80a239f","size":105,"data":"","first_seen":"2025-03-02T06:33:06.481005Z","last_seen":"2026-06-07T08:09:45.679021Z","times_seen":26402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.ftjzjtqz.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7a86ea79bded5439391e4af3f1474534","sha1":"4d5f7facd331622d5c7eef74085747d8efa7cc70","sha256":"d4e77b841361d7c588767ea1cdc2ced81aed1cc8fc3ad01db3a99fc233d22eb5","sha512":"003414a3ba1c6950b24932ae464b26dc99a3d3bf07ad5de8160cdd1436f58b723758c943a50ef9311dbac61e836c621c8522793294eed296b37af884c0402d10","ssdeep":"6144:rnzu1KAnrxwpytI5OcfpKu35oy7qI9vcZjZf:bzu1KAn+pytI5OQKu35oy7qI9vcZVf","tlshash":"39246cc4f18af53987eb34e6547e2002f63d6d18784c8460f758ddb63da858a9273f2a","size":218582,"data":"","first_seen":"2026-03-13T10:18:05.352832Z","last_seen":"2026-03-17T23:41:17.95608Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/ac-ui-shanshan.4fd61a57.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1da33a96e9761bbfb926c723229b5926","sha1":"746a0bcc7b5072738ce22a11b7033d7b9fa8da00","sha256":"f2ce6a063526275629adcc9b092d2a945ed92477b03093bf7cdeaa5da5a54826","sha512":"35b2ccaa82820ed5f9828de80fd67552315731c62b9b605b3ef9e0578c75caba4520d2c2418809a1c2c328783f011248fd6a77263d69b2dd2cd20b9f1bb175fa","ssdeep":"3072:vjh1RDXBzXrEd+y/cBDiWiiTn6AXvcyt8nmwsTbNi5bSSSSSa5Sbi:rh1RDXBzXr25Sbi","tlshash":"9d946f14b6e70d7254b7d0d99bae2d147a20c337900ace1e3a8c9bd58fc9c29a5f4739","size":436477,"data":"","first_seen":"2023-04-19T14:52:23Z","last_seen":"2026-06-08T14:29:32.890645Z","times_seen":2285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/slider.d420e4d3.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d420e4d388935ca74419f5edf6a4b3a8","sha1":"bacc1d0c5ab9314441b2cdf2943a292e4e579398","sha256":"7062323b9c3f6fbc07887ff7baaedb379d6836e7bfe70d7747025729598ab49f","sha512":"1669328f8a562f8be4195a3f484b2167f031d539fd07ae2d8566844e8d49f414438f0307dfb992f0286cbf2beda3fca20b11f5dacd8fe65b6bb96c064c4985df","ssdeep":"768:gXE3sT/57tbDWuZMiRPidEB5Sn55+3WjFQSjWDNGL:gUqWiV5Bm8NC","tlshash":"86e21f0a6bea6570a513b0aa5f5f984a7634419f8d06ed887d5c86c44f0dc3c92f2ff8","size":32272,"data":"","first_seen":"2023-03-07T12:04:53Z","last_seen":"2026-06-08T14:29:32.678691Z","times_seen":2303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee0951b15012e34c5209b09a008b2c74","sha1":"d1b5491b841d0e27196561a700a816c952818672","sha256":"91ad1162c191252b0a5bada0965cb64617d1682515f332c5513047438fe7de66","sha512":"982123fe6eee99a61b984d35a6eb9003dac5e88c521260fad6342f1dc02c751ca8ecb03082f0f56277a620bb714361da91a09003f9976b53060c66b2ef293276","ssdeep":"","tlshash":"70a0028124f6026154306507c4e45551e50dbe720e6a5df06164501904b14992b43f1d","size":64,"data":"","first_seen":"2026-03-14T14:04:22.06491Z","last_seen":"2026-03-14T14:06:08.563167Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1a01dd99c771ffd210ea6ceb50d4bd8","sha1":"c0f95605d076dd18c198f5413a1fafd07b53a462","sha256":"2241bf2d2791c67718f1e1b68f74347402c23e237e55c1065ba9c08800fc01a5","sha512":"d50e4f236a2c8145a164678574732a3d48c973c647d08e3b63d022be9c2d4e4daeff3154d521f10bd99fe9ca5a63e05a6e55563ce582031f3528433ace287dd1","ssdeep":"6144:vlTERvtO7hrpJyfa0pwgrzOuL7c5aCm728C5/yb37ti+VTm7ETiwfXG9+:vFktO7dpku8728C5aj7TLT1/","tlshash":"9fe43a8db201746242eb61b5003f1a0ba237552aa40a84acf57ccdde6e7cd4d61bbf7d","size":658506,"data":"","first_seen":"2026-03-04T21:43:56.598328Z","last_seen":"2026-06-08T14:29:32.96103Z","times_seen":593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","size":300,"data":"","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-06-08T08:31:34.912615Z","times_seen":29022,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/index.js?_=1773497000710","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9818e0c748f5a2b524bd748ef7cb298","sha1":"7bf70fd97a4cdbcca6bdf5aaca5c860d4752d8da","sha256":"87998697a35f3af73c2b35074868490b82313ebaa58a4a45e6a5bfd8049e171f","sha512":"a2b32f6d291542ba1b127ffbc43ff1246941f65077df6379f1149143666904b3da7554d7cccbfe7078772f9508b4dc714731b413e24af0a70ced90812ccb175c","ssdeep":"384:ZbhhNKg5/885YHtkLhm4yNHFeFWipjrQ8WFaLjLsu5HNaFrsrwZ7BAhqZs7WudXX:Tlo+lSjWkPjqF","tlshash":"ff427d171c1e842c168de9bda8654e4c6fef8eb25fc51e2db2ac897c052d90f49d93c8","size":13119,"data":"","first_seen":"2026-03-13T11:40:16.236325Z","last_seen":"2026-03-18T06:53:02.364522Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/v.1.0.1/lib.js?mc_t=shanshan\u0026ac_t=shanshan\u0026version=v.1.0.1\u0026ac_v=1.0.1\u0026mc_v=1.0.1","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aad2612dfcd43b8dfed1ca072aa5c21","sha1":"d3d97c5ae4454416d627ad3e9c5ed7856085b981","sha256":"8da0cbe25140dff92f08b7d1ecebd3da8c2f47c9d414dba6cc5bdcb4f7006de3","sha512":"206f426ea79f4ae420686a5a40e2ecf9ccabf1b6970a125ddc66ccb65e584c089622163fdc4ef94054734cd0869a2d1090fb66980418de0b23887aa0805d229f","ssdeep":"96:fYr5C14peqd/VyZ2N+dE+sf14D55gBmBEZQRZlgPhanvxiKLKH6aDVAG0:S5C1G/Vy8Id5n7gBmMQ/nJiGWVAp","tlshash":"1dd1504d7525f494a2c7a1a4c27f5c0fad37246e2829c034f5c1e9e2ad78e4d812bf5a","size":6486,"data":"","first_seen":"2025-06-14T14:10:40.274801Z","last_seen":"2026-06-08T20:06:57.745396Z","times_seen":1984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@thumbmarkjs/thumbmarkjs/dist/thumbmark.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"127f4803ead92200f8d88c6f27017ce3","sha1":"575fe16e17f23181d47db57caaf730f60b7aaef5","sha256":"a18668be7c6529e4d19d25469caf4659200c4807c10d7dda0659b66a6f887c2d","sha512":"df74eb72029c8d1c81048735f8948f069ecdff29044c28a220394c3bd7d85d089570f51a0745c0746af705baec7cab0cde2b092ac17d0f9e0de8455339bad808","ssdeep":"768:ltNLn7XywGbxLuFZoacL9lmqXn3IwWvWpBDRwpyu37eNl02FXtxv14h36PYgL:H4f2yYmuhq","tlshash":"2fd24db972647027027a2d57a07a9007e13567243a5bc040f22e9d477a97e8f23bbf7c","size":30800,"data":"","first_seen":"2026-03-13T08:36:12.258179Z","last_seen":"2026-06-06T14:39:34.316213Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/promo-ui/assets/entry/main.ulP8dcsq.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b5fa1f6dc3e660bef90c1dfc6efb70e","sha1":"77cfc591c721776a5a8a182397976e723e001872","sha256":"bbb03dff1e6c535144b1146179a3186d934f80b3a7e6f29ed0bec9e0d6c76b9f","sha512":"739930c728a7e87fd75a6796c79e96844e85ff3695790bd7e4cf5d05145362e6d16083765eb4ae2dcbbc187ebb86992bb15b34e67196a2e647b69666dedf7c5d","ssdeep":"49152:osNBnEux231Ppx1puhfG+C/LbeAwZFvBX6E8+iG2hsGi48szoo+/gscVHYL2QC2O:Cxr9","tlshash":"b095f7056af758309267f029575fe810b12450071e48fd48ba5d8ab82f9da3cb7f6bec","size":1932471,"data":"","first_seen":"2026-03-04T10:43:05.138113Z","last_seen":"2026-03-17T07:00:36.43189Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/ac-properties.0a0ca7e7.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d2c7342c0a7667d9a132b5a350cbc6f","sha1":"45f43e1b71231fc9ed104fc5109e93dd773d7b89","sha256":"5eec928133256ed81fcbf99219f08b4cc4fb511ba0d98989ffd51ea81e478dd0","sha512":"af3f3fa8f4300b5c41128eca663a2b342978ad8907dcd6085b36e69858374947b23c39196a373a57bcd70d1fe0cea5edddf155c5adbd6ee61ddb8caf0cef1f43","ssdeep":"12288:PQztvN/1EvyZTc9LfVem0ZFjTwDyrQLlQfcZW4P1o+FY/ArhkRcZOGg/JtVhnb3t:PSatTICLNZwDZOUH","tlshash":"9c8518a89e2fe411c8ee6607b48d7a3950ac3d229142d7d2ed5f0fde50c9c7c821676b","size":1800389,"data":"","first_seen":"2025-12-26T06:08:47.318346Z","last_seen":"2026-06-02T05:20:54.03185Z","times_seen":695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/promo-ui/assets/chunk/CASH_VOUCHER.Cn0Y36G3.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7feb8066f3d589458b5e905a356638","sha1":"af4ef890c2778b4930f769e48b8ef62e4ad22b5a","sha256":"1954786bf71459c5b7b08104275b89aba32f836971d3608ba243cfa75fea9fbd","sha512":"069db298dcd6629c546d8073c5e55f9fba28963c6c888ccdbd5c40268d2b5a8a907d801d37c736570fa584973eb01ef87674ea7def6ce24433edcd575cd71ee9","ssdeep":"","tlshash":"e3b0120154a4c216500eb30d5168d15e3e12af18bd2910e8804c950273d790584105b0","size":99,"data":"","first_seen":"2024-07-11T14:40:28Z","last_seen":"2026-06-08T14:29:32.892964Z","times_seen":2188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/9.14.0/firebase-auth.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3e80f5800c11d19d455627966a2262f8","sha1":"c66be704649d09d8c567533662f30e8c071bd68f","sha256":"77eb87926cbc4ca21f9da2a1d9290abe1cc08683d401d0e08a7aabd6447b3982","sha512":"386fa224fdbc774a9541c9181b32293a1de7440c1f2516ea43f847c371b0edae019d5b24af80b9a2f0bc1c3e69274b21c30e35a4d346be0ae61caa3e476235e8","ssdeep":"1536:Tt0/Cwwg21Lrb9KhZs4+3WRO/uFnO89uYkXQIv3pW/HM2QFu7F7kE6+qXcw9p+3L:TtqwgMLHNgrFgEmkSCeoh","tlshash":"e5b3098573e7e03286e988ebf0770103e32d5958795d806cb22d9dda3d5b885b637e38","size":117350,"data":"","first_seen":"2023-03-12T16:30:31Z","last_seen":"2026-06-08T14:29:32.880587Z","times_seen":2276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-08T21:04:30.414305Z","times_seen":85510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.B2M_fyvk.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"8fc2becec9bbb5ac069aa34468b76215","sha1":"8a7dc639ebbfd8beb2ad59fe57b9a63b7a7f18a1","sha256":"570206c6c8ec5a0c0eff5a74a683a6dccbb08a24a5919ffc5be31680c27b4757","sha512":"72dd74a528d7ac7229e3f599a179b34d74f2eeebe24cda1598736c8c8e49e328094a505b12c562e554f5f4784d224be797a3cb95bb794246ed2d9f95cb4b3281","ssdeep":"1536:vgZQUuQC6WDvhFCvB0Hx6J+vXlKAwTwH7nDPWnYlkChX8qg4JklHYD82:vgKUuQPWDvhFCp0UcDOnA5sFikRYD82","tlshash":"fbd3f8e83992f5626bf312b700af5817733c192b280c4990a211fdddb5b845ea17bf9d","size":138438,"data":"","first_seen":"2026-03-03T14:45:10.188122Z","last_seen":"2026-04-09T10:49:40.066961Z","times_seen":977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/numberSeparator.01b17b54.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01b17b549ad285136b8cb7ec0c7ec291","sha1":"7c721fd5c8da887f7c067a488d88f5fa538e3029","sha256":"959a2c44941d0318df9e0a3776c30393f74d50c9e46d113ea911360c49a621d5","sha512":"296a7cd6d1d6741ca17d884989669b2563ff352143111629947c93892d784738d772de8a00ea99d6c2758f13065e775ab232be33fa7020f7dc4493c2a6372db2","ssdeep":"","tlshash":"d0217d5836b700124d7fb0e98b8f52025b2126577484da8fb62cda947f02c2be2d36fd","size":1318,"data":"","first_seen":"2024-04-23T23:35:41Z","last_seen":"2026-06-08T14:29:32.726347Z","times_seen":2185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"985fb5e3737d478aecd0d5ae0153a2e0","sha1":"e7911dfb2171a3b10d635481a82c5f41b1c6f5ee","sha256":"c95997dd30b6480a88382d97353c9b73699c203f018a5a3b62754359d64e7188","sha512":"6d3177768dba937d127e64e407d689aefbe396f8de1414904011bc5a3dfd8092d6f0da0152935758c67554e0fc0c643fcb1915484d1235637dee3234fabd264d","ssdeep":"192:lkC2WszNnD1I+C7VdX9kXjLMAOghWHJI/LDHp+HPf/tpfC:JM8VSjLtOLI/Llif/tpfC","tlshash":"2dd1323f416113299027ed684bf4a7138178e8667c6d77fa25135b2ad7cbb8205e328f","size":6715,"data":"","first_seen":"2026-03-14T14:04:22.067285Z","last_seen":"2026-03-14T14:04:22.067285Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.89444794.com/common/v.1.0.1/manifest/manifest.json?_1773497000865","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:20.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /common/v.1.0.1/manifest/manifest.json?_1773497000865 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 05:17:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7c07a-891\"\r\nexpires: Sun, 15 Mar 2026 14:03:21 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: max-age=86400, public\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c1nIpJiLODenNqgfviG9ZtBKsT7CL75gk9cFq31v9uFVw6KvxG%2Ba4oFFwariceFCRxR3IxCk5%2FvHsaBVRQNGcBvxBBfGaxGtpR7lZNn40CE%3D\"}]}\r\ncf-ray: 9dc3d23f9a682382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2193,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f46dd29b6b0667d949674eedd810b84","sha1":"3c7ca218501dffa637ec753c82a5446075168b16","sha256":"2930eff4621e2ac7348c79a0922320b09bbd4ac87fd10b430d501c2224e51fc0","sha512":"bd3e4281371226081a2880f4498ba30db6bcac28d1f0d23c05ee098bb8bed9368b0f20d96077c03ca834ea74e0441621da9e4a6568a3c8bd32db69f13c864ae1","ssdeep":"","tlshash":"2741361c41650f9b74f53d58a8971e952db25c13b821b22d93172188cc3d6ae50fb0bf","first_seen":"2026-03-04T21:43:56.592492Z","last_seen":"2026-06-08T14:29:32.69512Z","times_seen":605,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/v.1.0.1/manifest/lib.core.min.f61a81fb.css","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /common/v.1.0.1/manifest/lib.core.min.f61a81fb.css HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 05:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7c066-43009\"\r\nexpires: Sat, 14 Mar 2026 16:15:37 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78464\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JM%2Fg9rjj283M3UKKiGsFezPnV9GsUSDO3fx8B6SeKXrtgNFWHqg6lDnKZbQ4OUzAXerHu8cpT61Fyus47YgHOWiQH0RThteci%2FfV%2BoQQu%2B4%3D\"}]}\r\ncf-ray: 9dc3d247bd8e2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f61a81fb0aab81d607fd1f0faa0c6ec8","sha1":"aeb84ec03ca975b50228c322785327132f3d3741","sha256":"fc2572f1760c2d9e7929946025af8093b20d1828c4af8fac29d0845714926e5d","sha512":"a96bbc97b60df69c4595c63fd22196e4e4c7dd50e6c4c8a516ed959699f70ee4373da19b11e567e7a8020ef470e3d370b98ba9813f1b5b2c5e59906079a83704","ssdeep":"6144:lHtsLOg1Dg34cIYhrSTaDgxo+/7zyISSaMrb5t9vz5aS9QF8gVSShYkZow91WAW4:SFDC/Iwr3DKN/7ASbr9EZow91WAWkgDc","tlshash":"e1441caa584222cfb51b4936d7c82ff4433dc65394621ded72c62c4ac785ffa62ea113","first_seen":"2025-06-06T19:31:09.879041Z","last_seen":"2026-06-08T14:29:32.734349Z","times_seen":1947,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/mc-wps.47b8a39e.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/mc-wps.47b8a39e.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 02:36:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b226c1-f63c\"\r\nexpires: Sat, 14 Mar 2026 16:15:39 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78462\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlJ7MRfESFG06Em1a%2FLjuFrpi%2BsZVaHJDQRCVzz5Xk%2B7YsQnb1d5E1H1uApxv%2Bh3zJMEDc6LWAaimTZjgNz8HmbrbzA3sGBt5UwPGGEJS5o%3D\"}]}\r\ncf-ray: 9dc3d24adc892382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63036), with no line terminators","md5":"47b8a39e968333f563334503385a8d3c","sha1":"b1c1889c7ec3ad22b91fbeeaff686948a748ae57","sha256":"7b7a05b24a6c2f6b8b990a1fd37c0138b9eaa72d89911d9173e9f2b2b9f89cc7","sha512":"0e1e9a09449f953e4c0d8468d7a07f90b1e463aa0e75846e83e01d28f360be5c3bdea052bc17f9cf60b65ae8dd7ecb0855464fc5f099426cc8535571dcf8be2a","ssdeep":"768:3J58ixoo2kPZ+Njhts/fiEhiaiOhiBOfJa0A2RfbVd:3J58ixoo2kPZ+IfiEhiaiOhiBOfJL9","tlshash":"ff5366c974c2e8cebb33f53bcc5e7b152935be6945284870415121aa2cf998c9263fed","first_seen":"2026-01-11T02:47:35.36856Z","last_seen":"2026-05-03T23:32:29.336404Z","times_seen":563,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/js/chunk-web-view.f45651e7.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:19.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /js/chunk-web-view.f45651e7.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-aa903\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 13:31:23 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W6takJu5GQD1Re0ACncOAsOg9hckdwAm5rSD2HJ%2B3W%2FgCcGcGxrfctupXXNCkIIySOx5WB5BXeBkSzwrpso%2B12b854kmzjn13M5FrNpNZyw%3D\"}]}\r\ncf-ray: 9dc3d2389bde2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":698627,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"233072ed54450602cd3a3a1199414a62","sha1":"ea56d8b77bb74c4b58abf6f39eb64f659ff78e8b","sha256":"1352d2fc1921ed25a844c67aaa21fbbd3b196b4571b7991d18f80e6588dcfe13","sha512":"1f9a8d340acf5cdb40723c4567511bc652bdd1f83b1dbe5c3b7e95d0408c5ddcce2aec14a779aaec6230d0a43cd85d9918b98e5129259b3109deafea72b3ed87","ssdeep":"12288:hw4jUORRJhOErW3xeRLV8FNUTyqFLVd6LHgl81zivqqJ:hwVORRJhdvRh8FNUTyqFLVdKHqQzh+","tlshash":"1de42b9eb1c3b1794b736026202f3119b33b2d84641d8854f635d8da79acd5a932bfbc","first_seen":"2026-03-14T14:04:21.987581Z","last_seen":"2026-03-14T14:06:08.461317Z","times_seen":2,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/promo-ui/assets/entry/main.ulP8dcsq.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /common/promo-ui/assets/entry/main.ulP8dcsq.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 04:20:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7b304-1d7cb7\"\r\nexpires: Sun, 15 Mar 2026 14:03:21 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XY7QvsHNyZOBXfleWylYiSyEQzt4V4Z0%2BTq77Y6DV2pg4LJoqcckh4QlzAJx5OVVhfvrP1sRMjA7HY%2BtkhLXaHFJwV%2F%2BKkYjeswR8Y7bVgw%3D\"}]}\r\ncf-ray: 9dc3d2414e2c2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1932471,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (616)","md5":"a1e7098bacff85abff62ceae2ac0693e","sha1":"f1e96fc01884a012333654bb1460cec7f2e66eb8","sha256":"a75a8103e6fc7c9e43596ae0c661b41a57073ff9c5769c89213203a503fe097a","sha512":"c1f1d948558a14b7e2b59ded7c6a452ff2f3afa3ed389fb73112498a0d60c4d702b62b909de4be683eb4e1b9de92bfada86604009086c45f09651315f73b1212","ssdeep":"24576:osNBnEux231PppQymgiPuhfG+C/LbS8tL:osNBnEux231PppFmgiPuhfG+C/Lb/L","tlshash":"a545e7014af64b30896bb0591a5fda20752090035e48f95db91d8e782f9db3cf6f7aec","first_seen":"2026-03-14T14:04:21.988661Z","last_seen":"2026-03-14T14:04:21.988661Z","times_seen":1,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/MCSFE_getListAnnouncements?types=B%2CPL%2CPU%2CPR%2CH\u0026platform=W\u0026version=1\u0026ext=avif","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/MCSFE_getListAnnouncements?types=B%2CPL%2CPU%2CPR%2CH\u0026platform=W\u0026version=1\u0026ext=avif HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: jhj7qej732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3, FREEPLAY3\r\nx-elapsed-time: 9\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GKdlVXG6mtBBgvxMCnDvXULdHOMhrcHpp0QDxNcBXd35BGi7LnBpI6bXqdxdFSu7IKFznrncBSsdAfS4DShg2O5liDziDhYKNgwBT9TEVVw%3D\"}]}\r\ncf-ray: 9dc3d2473c4b2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24585,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b56885f39399b625d94f20cef6c28208","sha1":"0c7d96edfaecafa5306865ac1324d08df53401b8","sha256":"ecc263c52721181d905edc9df1a2657d98d57e82ad288e239d8173524f0e2187","sha512":"285ba07fd485e7dbbc9a02832e2f589ed9184edec99dec2c2f42d7a015bc0a07283dbd4c8da66dee850a7a21ddece99f3c185f204c9cc0d16d7fbb105f25cb1f","ssdeep":"384:Vrl/lJldlAlQlfefoSTdafoSTdL7e7p6hrQr:Vrl/lJldlAlQlfefoAafoAL6Z","tlshash":"56b2774a23b81a3a4e0b11c071cd3acb5a7c708f36855ee1b29eee79c4f9471a572f11","first_seen":"2026-03-14T14:04:21.99025Z","last_seen":"2026-03-14T14:06:08.466313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@9.3.0/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@9.3.0/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 39763\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 9.3.0\r\nx-jsd-version-type: version\r\netag: W/\"221af-Y8Fk6ieasqc10zeyVaJWvuedoKk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\nage: 3685933\r\nx-served-by: cache-fra-etou8220046-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139695,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65285)","md5":"4570fef97846ca636c3c49463f861552","sha1":"63c164ea279ab2a735d337b255a256bee79da0a9","sha256":"4651353cb061bc4c99cd04687a305193ecc7d4842aabf453914a59eab46781f2","sha512":"bf569392feb91f1548af4f4ccd5e9e30ad9c7580e34bd4a5231c5b91c2a7dc8a4d316d8cf31640e50e2e929f8f4ba74c1f34cb4b1962b35543ea87003f55319a","ssdeep":"1536:EIJAfGWjLP8NE6WG/KxXzbolxU/yBkt+TSD8wkvtnTClvwSmp8Y7CjGEG5/AsVuL:HJjNi+CyBkoBUvwNp8Y7Cji5/5cp5v","tlshash":"7ad309896221b57546e316db93e4c621a3b50540b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-05-08T16:47:31Z","last_seen":"2026-06-08T14:29:32.896932Z","times_seen":2385,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/GCSGAME_getVendorEvent?ext=avif\u0026_=1773497002831","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/GCSGAME_getVendorEvent?ext=avif\u0026_=1773497002831 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: vtiymjr732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: REWCEN3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91ORYWXY21xLemiflxZ1lzne2l7DmuFnIjzDuy6iL12EBC%2BgLKYMBPkY1fxtTK0JljBS4bn9Vulv9SgUz2iym2cA67C%2BFz%2BBH8MEH8sjj1M%3D\"}]}\r\ncf-ray: 9dc3d24d092a2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3163,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eafa184445cc7867feb751263196fc44","sha1":"5b0d77f1a0b36f3aece16651a725f1fa0833b9b2","sha256":"d047e6ed4411c492fce25a584e1e7b20d5c3a6257afa0f60d6ac88f4af411849","sha512":"d2b017604a2fbdc3a92e530eadf0b7c3901ed1b91770cb6f166b728d59ce5a5a78df081356a22304dd72185c8db92a0b0362fa79e5a2f118b98c59a7b7f099b6","ssdeep":"","tlshash":"5f51345b219918ab5f7112cc314efe8be6fa415fceccdb84829c3d0859f436e6306584","first_seen":"2026-03-14T14:04:21.992285Z","last_seen":"2026-03-18T22:43:16.675046Z","times_seen":3,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.3830292.com/dev-images/GCS_VENDOR_EVENT_IMAGE_ICON/8204.webp?t=1772078590331","fqdn":"images.3830292.com","domain":"3830292.com","tld":"com"},"ip":{"addr":"104.18.28.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3830292.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:38:11 GMT","end":"Fri, 17 Apr 2026 03:38:07 GMT"},"fingerprint":{"sha1":"AE:11:DF:03:20:61:A1:BC:86:47:C3:D3:FE:BD:68:DA:D1:26:B4:15","sha256":"6B:63:D4:D5:6A:DD:58:BC:46:72:8B:4B:E5:17:14:B2:2F:B7:D4:C4:23:C6:64:87:0B:48:0E:DC:D6:55:5D:06"}}},"request":{"raw":"GET /dev-images/GCS_VENDOR_EVENT_IMAGE_ICON/8204.webp?t=1772078590331 HTTP/1.1\r\nHost: images.3830292.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5120\r\ncf-ray: 9dc3d2518f800daa-OSL\r\nlast-modified: Thu, 26 Feb 2026 04:03:10 GMT\r\netag: \"699fc5fe-1400\"\r\nexpires: Tue, 17 Mar 2026 08:07:14 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 366969\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5120,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"542ade1eacaf76a8e175a2d21c1445bc","sha1":"927bda154c55d4f17ab0ec0812de971415de232e","sha256":"c4a517d8554d54593627813e5b241734f1e87f020f4f5185a6a6879c1317a869","sha512":"6064fa2a881f84a527f5dd897eae3a55c9eaf67155336a0ea83e5930dc6b0cf737c37b43d1394c0b8c5c052175d4d411ea0ccde76681bda6c551837e8a91a09a","ssdeep":"96:u7xViyCr88z9tm9zWC1htdmoArgLk6nDkQTUTjSHrIzJseHk7k8:u7x1bSexrtd+8Q6nDkQgjrzJssB8","tlshash":"13b19e642d543de8936df31bee7813c6950b170ab8967fc8391f198222ecb902be8465","first_seen":"2025-12-13T06:22:54.435297Z","last_seen":"2026-03-31T15:35:44.631037Z","times_seen":284,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/js/encrypt.js?v=18836","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:19.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /js/encrypt.js?v=18836 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-118d6\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 13:31:23 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C1YEVKTqdh%2BbF6AZI2BKWKmT7WKKHXB%2By33Y3%2BHHRhiyL84Y4hf5FS3dj24FTxKBJ3LpDWHPApMeAsmPdlsaT%2FKJ0PJBTJqQcUSw7XvRRz8%3D\"}]}\r\ncf-ray: 9dc3d2389bd62382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71894,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458), with no line terminators","md5":"600906fff093ac452fd325ec43d60589","sha1":"ec186fbbfd8bea0f5af2d79c3b17b8126360452a","sha256":"d65313dd3770113be6f85c42a1780dc0fc2fc7320d4c8b243428c035ba132e03","sha512":"b932a89314707992a9af7f369ae25ff68a79e814e257834697328c96837ab3563fbb52bbf841a5257ead01a6779249b7bd28135c0d5388adff0147a8f433f745","ssdeep":"1536:iFgw8Kye/AepW5dYrSWsw3uaoeVWG+lirxvYmT8LCRb:igjcw5dYrSWnrxB","tlshash":"af63a8a1a6a06408c3c79b2a771b71eae02e75667cc14c4bf214ff586f88b17f6d1930","first_seen":"2026-03-14T14:04:21.993803Z","last_seen":"2026-03-14T14:06:08.504022Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-14","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"www.89444794.com/js/encrypt.js?v=18836","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/promo-ui/assets/chunk/CASH_VOUCHER.Cn0Y36G3.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /common/promo-ui/assets/chunk/CASH_VOUCHER.Cn0Y36G3.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/common/promo-ui/assets/entry/main.ulP8dcsq.js\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 04:20:19 GMT\r\nx-content-type-options: nosniff\r\nexpires: Sun, 15 Mar 2026 14:03:23 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2BUlouPTv5%2BqRTuWQ4gfyg5aV3rln2xwX%2BKyFEibfKDzkLoypBzfgdn3woO3zlJLYeXgig7TNPO%2B%2BxK2p5nERpoPWyiNb5geVbjmEGCpVls%3D\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\netag: W/\"69a7b303-63\"\r\ncontent-encoding: br\r\ncf-ray: 9dc3d24cf9082382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"9e7feb8066f3d589458b5e905a356638","sha1":"af4ef890c2778b4930f769e48b8ef62e4ad22b5a","sha256":"1954786bf71459c5b7b08104275b89aba32f836971d3608ba243cfa75fea9fbd","sha512":"069db298dcd6629c546d8073c5e55f9fba28963c6c888ccdbd5c40268d2b5a8a907d801d37c736570fa584973eb01ef87674ea7def6ce24433edcd575cd71ee9","ssdeep":"","tlshash":"e3b0120154a4c216500eb30d5168d15e3e12af18bd2910e8804c950273d790584105b0","first_seen":"2024-07-11T14:40:28Z","last_seen":"2026-06-08T14:29:32.892964Z","times_seen":2188,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.3830292.com/wsd-images-prod/elitlbs2/template/wt8814_fav/wps_rk_text_20260302020737.png","fqdn":"images.3830292.com","domain":"3830292.com","tld":"com"},"ip":{"addr":"104.18.28.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3830292.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:38:11 GMT","end":"Fri, 17 Apr 2026 03:38:07 GMT"},"fingerprint":{"sha1":"AE:11:DF:03:20:61:A1:BC:86:47:C3:D3:FE:BD:68:DA:D1:26:B4:15","sha256":"6B:63:D4:D5:6A:DD:58:BC:46:72:8B:4B:E5:17:14:B2:2F:B7:D4:C4:23:C6:64:87:0B:48:0E:DC:D6:55:5D:06"}}},"request":{"raw":"GET /wsd-images-prod/elitlbs2/template/wt8814_fav/wps_rk_text_20260302020737.png HTTP/1.1\r\nHost: images.3830292.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 79103\r\ncf-ray: 9dc3d25028170daa-OSL\r\nlast-modified: Sun, 01 Mar 2026 18:07:41 GMT\r\netag: \"69a4806d-134ff\"\r\nexpires: Tue, 17 Mar 2026 08:45:24 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1625 x 1437, 4-bit colormap, non-interlaced","md5":"6d35f5f989fb140ca57c351d11bca36f","sha1":"58b7be111a57f22219ed0acef02b5906bdf5cfe6","sha256":"c260eeac6a38827d5611a2fe491eff29c77b457bda4d63c0163d340b6df15abf","sha512":"9beee7746fec29285f79ed963b7f88eec6c4c6690255288f4cff32d8685b8f4f5d26527a3ef93fc03c4240a0fc998b875a3a55f8facc58e0fd94251895be7bb3","ssdeep":"1536:O4Fefq6gr2L+l1UqQ781KeFKGP4+ektEh6ECzQJ4UEo7yfM9xF1:kfqPbPcy9PWr9JJEoSwR","tlshash":"c57302f27b4e0e8b2c4f506b2e9ee060586e95e7eb7c8f99341d990355c34580e85dce","first_seen":"2026-03-14T14:04:21.995068Z","last_seen":"2026-03-18T22:43:16.614518Z","times_seen":3,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bowlby+One+SC\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Orbitron:wght@400..900\u0026family=Roboto+Serif:ital,opsz,wght@0,8..144,100..900;1,8..144,100..900\u0026family=Squada+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jasmine2020.89444794.com/register","date":"2026-03-14T14:03:19.414Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /css2?family=Bowlby+One+SC\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Orbitron:wght@400..900\u0026family=Roboto+Serif:ital,opsz,wght@0,8..144,100..900;1,8..144,100..900\u0026family=Squada+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jasmine2020.89444794.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":1,"connect":9,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jasmine2020.89444794.com/css/chunk-web-view.61f24ae2.css","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jasmine2020.89444794.com/register","date":"2026-03-14T14:03:19.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /css/chunk-web-view.61f24ae2.css HTTP/1.1\r\nHost: jasmine2020.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jasmine2020.89444794.com/register\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-30aa5\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 14:00:42 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 156\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c1PAwILdJKK8EMFpiL4Cs0xDmc9kdMZM60aJ%2F7DkLBFZoM3wPrIi2CQrVhNkRcW1xSg%2F4TdkavbywBz1QKjWjIhjRzSaGh94VFDuE5qHeuO0YjIDSyZJrA%3D%3D\"}]}\r\ncf-ray: 9dc3d2364ecc2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199333,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"645776f0b3da0ec4898547b381b6f882","sha1":"5cbdb432fecd6258d3c9b0629fdb136af8385bc3","sha256":"397664dce3fff8f028d9ba73830f42b656761727f8883787ca8033f56586a5b1","sha512":"435f8bc17cbec9bbf151293b0f6829f63506f51a4c5e473c70f1efc94d3b098746235607fb5f2c87ec6ea811de91eb47828ab6b2e165174f8af80e6dc04baf73","ssdeep":"6144:brkYkY1jtXyBon4UXkdYLLY0TyQv/fRk9TMnk+HW2PI:btXyBon4UXkdYLLY0TyQv/fRk9TMnk+O","tlshash":"5c140a269d543208e437cd266bd8a68d5439c323f1733aee7e652819c7cb69311e728f","first_seen":"2026-03-14T14:04:21.996591Z","last_seen":"2026-03-18T22:43:16.712008Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/js/index.fd066575.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:19.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /js/index.fd066575.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-16ac28\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 13:31:24 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Ige%2FdYrBtg4I7cbAqk0a%2BbC%2BovmngTlZLQyhmQ9GApg6yFM72OLtaiFZsPHjOyhgmKsqK7dQJE7Ogwo7sXNnld9Ei0z1EuqfKIgFrZoG6Y%3D\"}]}\r\ncf-ray: 9dc3d238abe42382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1485864,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"473256167bfe1eed96fe52e4441d3451","sha1":"96d5054f37a18902cebfdb9e275d2486e41f546a","sha256":"e20c8de6753b8c167a756116c43697c0dd948a1038b4d44160fe56d9a9945cf1","sha512":"372cdb527a4d2e854733191d3846bc54ce62aad8454522915111ace59cdda3d5aaddad7c622e1262371c7bdb1512ca0acb0ea1f2c976690a4510d3c4609a57a0","ssdeep":"6144:BRDbknGmydjOw0JTzWxkTA+CJc5b0egiHbSiM1HywAwgD:vsGmIyxTKyH5b0ebHtKgD","tlshash":"22255bf9a3d8a1e89303d7e4d62a94643b5f38fa7f81c98493e999d0973608cc55bdc0","first_seen":"2026-03-14T14:04:21.997504Z","last_seen":"2026-03-14T14:06:08.279292Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/css/index.570c9ba0.css","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:19.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /css/index.570c9ba0.css HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-32e1e\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 13:31:23 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtGYpanRV9OYyEOv1EjQ1cDaIRn%2FFVsdY8j4MTjJSbzPAqcJuSJEJFfz8tndMTIULGCLvSreWuuJ7bZIr2AIbJbJ2qwrFVk8x%2F%2Fvsw6dd88%3D\"}]}\r\ncf-ray: 9dc3d238abfa2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208414,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"799718d2bb473b2d6f6c8a373299fc02","sha1":"3c6e3b5056858877643debf639f4a25681a16187","sha256":"f2bee7a43541a525fd339e63911503573376a7e87cf0d737627eaefa102b4972","sha512":"dbcee2604a9d13f1e2534d42a1888080bbe38dbfc6564bca9fe5360911e43f7d06f037c8376a1b810e71de3460bc502d3d3eaf0c2186b804abea5d1e2740c02e","ssdeep":"3072:VEFY9uSgn4blHfEqCUWSCUWgytCUWPMCUWd:VEON/HfNCUHCUJytCU+MCUw","tlshash":"f2144b310a063539bd77d46abdc0728d6e18e203ea275fdcb6615a2dc6cb3e212f1749","first_seen":"2026-03-14T14:04:21.998338Z","last_seen":"2026-03-14T14:06:08.512748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/mc_shanshan.d756f683.css","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/mc_shanshan.d756f683.css HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 02:36:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b226c1-e8eb6\"\r\nexpires: Sun, 15 Mar 2026 08:10:36 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 21165\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yyyVFPVrcjsHasXQMsqU5ChTZ8fSTxB034N1fOnvvzx5D5YwVjt7bEKsk8J1rr1yoz%2FzBFiV4z96lGPuozOsn50QkWXb3Y%2FRlauAiLWzaV4%3D\"}]}\r\ncf-ray: 9dc3d24adc972382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":954038,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7713312a29c319947a2b8cbed86065bf","sha1":"558060e26a3d638ee979b1d7a621caecd371fc64","sha256":"8e9f71f70878f51ad0375b91cab553629b3d4063891df7ed116192ac9ab7c215","sha512":"82be77cfea490f854f5168918de7d8404e56fff795adf73eeb29a5dd9e97ff61787984f7cc9f2bf6550631b31023f2b8315ceb3cfd214ed6a5600cbb0ae3cb29","ssdeep":"12288:o9Uku1i9gHYaKlepqOuGYF/ZzEkDb0644CAPta:o9Uj1i9gHYaKlepkZBzEks644XPA","tlshash":"6515d8255f12217df16ed83e76a4f6cd2e28c413c2572e7db246f1acc3ea6b119b1206","first_seen":"2026-03-13T11:40:16.294921Z","last_seen":"2026-03-18T06:53:02.269174Z","times_seen":24,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/css/chunk-web-view.61f24ae2.css","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:19.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /css/chunk-web-view.61f24ae2.css HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-30aa5\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 13:31:23 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ht0hMDkOpsQ2BR%2FYe0DJzx50W8HFLhQlXNdfK%2FSsPkynqazQ5%2Burt%2FodozJSOS56Ktf9UXffFEAq4hUK5xYNcOXQA7Op4nql0U0SougakGk%3D\"}]}\r\ncf-ray: 9dc3d238abe72382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":199333,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"645776f0b3da0ec4898547b381b6f882","sha1":"5cbdb432fecd6258d3c9b0629fdb136af8385bc3","sha256":"397664dce3fff8f028d9ba73830f42b656761727f8883787ca8033f56586a5b1","sha512":"435f8bc17cbec9bbf151293b0f6829f63506f51a4c5e473c70f1efc94d3b098746235607fb5f2c87ec6ea811de91eb47828ab6b2e165174f8af80e6dc04baf73","ssdeep":"6144:brkYkY1jtXyBon4UXkdYLLY0TyQv/fRk9TMnk+HW2PI:btXyBon4UXkdYLLY0TyQv/fRk9TMnk+O","tlshash":"5c140a269d543208e437cd266bd8a68d5439c323f1733aee7e652819c7cb69311e728f","first_seen":"2026-03-14T14:04:21.996591Z","last_seen":"2026-03-18T22:43:16.712008Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:20.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwPUT8xV3PH1KbdfjikO2aVZ2_jfqQKEckf4GXGPn3vHjMd_ZKO4NBFfWvRIoC99K8uB4ITk7M\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\nx-goog-generation: 1773396432451303\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 102724\r\nx-goog-hash: crc32c=tsIZFQ==, md5=IkzV54pOqL60kcEPy+n/DQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 33195\r\ncache-control: public, max-age=28800\r\nexpires: Sat, 14 Mar 2026 22:03:21 GMT\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":102724,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"224cd5e78a4ea8beb491c10fcbe9ff0d","sha1":"4ce36efcaa07253d88e4b632a513793655a7cfeb","sha256":"593fb3e68af17185bf941c5ae204493e7661518d0b9ee513528680d31e133415","sha512":"5d849008538950e2b972aa1f021818b71ffa3a06634970703c78a80861013b40ee2c72d92c510cc8bf9d60747935a306e84111ed0e67700942cdce25e5626f9a","ssdeep":"1536:E5yMuRri7rJdJq1ckNmeuR/bNhPiBwpDoLCPoRMCRUvRAt:E4MuRu7V2XuRjNN8MCSRg","tlshash":"c6a349d67282b03493f785e7a17f6216b33a2918740d8410f17cec6a396a987d177f2e","first_seen":"2026-03-13T10:18:05.429241Z","last_seen":"2026-03-16T12:25:03.426477Z","times_seen":152,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":64,"dns":45,"connect":1,"send":0,"wait":4,"receive":2,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1 HTTP/1.1\r\nHost: secure.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 757\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1776,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1776), with no line terminators","md5":"99163c203ae05b4c82c8805284d11db3","sha1":"9f3a0183147aeecb4bf41de0dfb8f79bbc49cd0d","sha256":"2dd0343a83344a187dfa8e2fe227929e313678f76fe003fe1adfd8e0caa053f0","sha512":"9eed7b637571331c402c17802cf51675912d9a4c1e5ee1dd045ca8ead50d8c9ea2a52968397c405314c61d86f928957ded9c5289a4db8d4e755ce2b6283be6c7","ssdeep":"","tlshash":"bd316273aa00c91d7174c235fd9bb08e895e934e8644acf2b29512fe1ed0ed5c173e2a","first_seen":"2026-03-13T10:18:05.543965Z","last_seen":"2026-03-17T23:41:17.861164Z","times_seen":134,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.QdCjhZDS.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/8.QdCjhZDS.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwzqLZeJXiA7bcZzelIJBdqv2Q1xqEaKSYwkFvgPmfQfKq_J0U8QkX2qgLz1-VmK8z1_5Favg\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\nx-goog-generation: 1773396432333700\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7835\r\nx-goog-hash: crc32c=QNEBAA==, md5=Q2fo27IkEQnOT6suXnZFrg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 2978\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7835,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7834)","md5":"4367e8dbb2241109ce4fab2e5e7645ae","sha1":"a511b81118abf52eec374b30fa149f9e7ce21367","sha256":"2fc8bfe3d41089f8227070d7e05db0dba6d2d5108f9c525a98aa12a34fdb8705","sha512":"46f29c390d5197d4ffc628cf45c501903e8b7515381bcc4135f5007b7b3b17ccc3fd32f7a841ff662aa98fd7b8e97229ca21820be40f3085ebd70eae381e6f65","ssdeep":"192:FZtPwLpcfZyJjChMMuTGUwPPWnwuDfxwhlDDPXXztXijdA2y9NIdwMQD3E4M:FZtzyJKMMDUwPPWXyPzSdA2y9edw14j","tlshash":"ecf108bff741e4b5e3eb88a09e1a0103b93a1654799d80b0f61c4d10a15eac4b277fe7","first_seen":"2026-03-13T10:18:05.566059Z","last_seen":"2026-03-17T23:41:17.907619Z","times_seen":134,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/js/aboutMerchant.js?v=18836","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:19.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /js/aboutMerchant.js?v=18836 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-7c0\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 13:31:23 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTD06LrST2E9Q4oSTgfnEjqJjNewEFdOJ2ogDrISnPrELNOSEGnxqgRobVjnzsDTuy1%2BlSHdABLR62iH7xi6gdBVAzs2YzvYTvp0zp9rbeY%3D\"}]}\r\ncf-ray: 9dc3d2389bd22382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1984,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1890), with no line terminators","md5":"568403915c6cf2c3eecc0a299a35861e","sha1":"bdf3acedc4179c060a0ad0ec73032de39e7c4c0b","sha256":"a1e6867177e1d5a22d21ce39d9af84dfd9464457beb55b923f969f9c66057164","sha512":"4c8bf3dfab872448c88693036e62a98481f8ebc7add84670daab327c3e14142e0a4480d8e251943491346b47a9f88349cc7675c24eefcb85eaa0d858a0e45930","ssdeep":"","tlshash":"d941539eb14bebe205f620822ac56219647360d804b6e4817b569540b47ee4fc25f9cf","first_seen":"2024-12-22T03:03:41.35822Z","last_seen":"2026-06-08T09:43:18.294344Z","times_seen":469,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.3830292.com//TCG_PROD_IMAGES/B2C/libs/device.html?deviceId=","fqdn":"images.3830292.com","domain":"3830292.com","tld":"com"},"ip":{"addr":"104.18.28.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3830292.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:38:11 GMT","end":"Fri, 17 Apr 2026 03:38:07 GMT"},"fingerprint":{"sha1":"AE:11:DF:03:20:61:A1:BC:86:47:C3:D3:FE:BD:68:DA:D1:26:B4:15","sha256":"6B:63:D4:D5:6A:DD:58:BC:46:72:8B:4B:E5:17:14:B2:2F:B7:D4:C4:23:C6:64:87:0B:48:0E:DC:D6:55:5D:06"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/B2C/libs/device.html?deviceId= HTTP/1.1\r\nHost: images.3830292.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 08 Dec 2025 00:37:05 GMT\r\netag: W/\"69361db1-3ba\"\r\nexpires: Sat, 21 Mar 2026 14:03:21 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\ncf-ray: 9dc3d2442e080daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":954,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (656)","md5":"da348ed5600d807a6cfad06194240779","sha1":"47da2ae97020e1c8458582fe2c57235bba7b4b5c","sha256":"c39a5ce87ea916686e621ccb11e4b73ca57fcc2746fc56a86a51754e1addc8b1","sha512":"5c9adf5e2386ad5d3cec04fc8e24b0f49b4c1a171538590f400a80a180f9190ca6bf269613e04978032e5a09fcb57bca0fefe4212bb15e6154e81904d5647056","ssdeep":"","tlshash":"4e11d00f38415445c2f28559f5ba7719703a78d0b4c689906a4164eb2ce4f4fc96fb8e","first_seen":"2025-12-08T11:29:18.408405Z","last_seen":"2026-06-08T20:06:57.720153Z","times_seen":1265,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.3830292.com//TCG_PROD_IMAGES/COUNTRY_FLAG/CIRCLE/TLG.svg","fqdn":"images.3830292.com","domain":"3830292.com","tld":"com"},"ip":{"addr":"104.18.28.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3830292.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:38:11 GMT","end":"Fri, 17 Apr 2026 03:38:07 GMT"},"fingerprint":{"sha1":"AE:11:DF:03:20:61:A1:BC:86:47:C3:D3:FE:BD:68:DA:D1:26:B4:15","sha256":"6B:63:D4:D5:6A:DD:58:BC:46:72:8B:4B:E5:17:14:B2:2F:B7:D4:C4:23:C6:64:87:0B:48:0E:DC:D6:55:5D:06"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/COUNTRY_FLAG/CIRCLE/TLG.svg HTTP/1.1\r\nHost: images.3830292.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 08 Jun 2022 11:45:15 GMT\r\netag: W/\"62a08bcb-2d5\"\r\nexpires: Tue, 17 Mar 2026 08:07:12 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\nage: 366969\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\ncf-ray: 9dc3d247eafb0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":725,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3dcd3e1813582cf87e3a0fb07a91928e","sha1":"3884fccb8cf2f4f941395361c0660be8475514e0","sha256":"578d8002d750bbf7b90f801cde62b0e9dfe575766c3de6fa61e097eef5b710ad","sha512":"73f47023afc1659a6d2f2a50e3640077f4a48752ca380b658f164ce0e0dae3f43414d97479676f66e123cf64526410a579975f100c8bb768793fff73333539b5","ssdeep":"","tlshash":"02019744e5a8315cad0a9f50ce2c77f720bf7029a1d005b861a4ac0436076cba5c4ec8","first_seen":"2023-08-04T17:10:05Z","last_seen":"2026-06-08T09:43:18.293859Z","times_seen":788,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.Op9ce5aY.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/2.Op9ce5aY.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWx9BFtj8_zOPQHJwHafHk679Psyz0H1jZs8GEU3yAV5EsUSvZIk2E9NacfJG2OioGRdyM-nQ0Y\r\nx-goog-generation: 1773396432422958\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 443137\r\nx-goog-hash: crc32c=tHLbhA==, md5=+1bNJs1iCV23VzDT6oIxZQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\ncontent-length: 125183\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":443137,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fb56cd26cd62095db75730d3ea823165","sha1":"0ea9e5873b17d40fa4a904a96f2d6e98ad908bc3","sha256":"5fad77850d8a18019ab86b148662e339c37aff0e6136c795254331dfc3cc4252","sha512":"1273c51880bde1777e3a9f9532c0595c46d8cc2e3b4abcf790e9923519d49e96e23f3cdd4d0d40d42ee06d6c01a6dc8d8adc7e0df40052ee1e230627db9e0616","ssdeep":"12288:YEpdABplc/kC8uMQViHTJK1rvYJO6t3/toS6RiQIlMLf+5UqgFp6ey1Q9fBMFO/V:YEpdABpluYdWiqj","tlshash":"4d946be07242f938c7e7c19b90bb160af73d3d09b42e9621f1ade85d33954489267fa4","first_seen":"2026-03-13T10:18:05.178563Z","last_seen":"2026-03-17T23:41:17.818728Z","times_seen":136,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/check_goals?organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026x-region=us-south1","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:23.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"POST /v3.6/customer/action/check_goals?organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026x-region=us-south1 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer us-south1:NONNS3xdTh-_e1EtIFSVYQ\r\nContent-Length: 107\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":107,"data":"{\"session_fields\":[],\"group_id\":0,\"page_url\":\"https://www.89444794.com/register?affiliateCode=jasmine2020\"}"}},"response":{"raw":"HTTP/2 422 Unprocessable Entity\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://secure.livechatinc.com\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-length: 77\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"422","status_text":"Unprocessable Entity","fingerprints":null,"data":{"size":77,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"83fedc5ce35df854fd3e2dc588dd25d9","sha1":"4fe9b2c3fe450d363c394afbb7613c311fd1458e","sha256":"de4c4caf14ad084158eee79e3625e55268c6942fb2cc665b1a80c4fed84cfaab","sha512":"38af025fd894fd71f65d71c6c7264ec43885a70f0fab6106534ca4feff3428183f03eec320d7682ac10d4b1cc19ea68b86105369cb7e4eb22f8ba44687953268","ssdeep":"","tlshash":"37a0120011600c990e2341463890740362d1145080e0d80001094458628cfd66122205","first_seen":"2025-11-26T09:20:36.760659Z","last_seen":"2026-06-06T17:09:32.088154Z","times_seen":1108,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.3830292.com/wsd-images-prod/elitlbs2/fe_setting/web_logo/wps_LOGO_20260305123535.png","fqdn":"images.3830292.com","domain":"3830292.com","tld":"com"},"ip":{"addr":"104.18.28.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3830292.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:38:11 GMT","end":"Fri, 17 Apr 2026 03:38:07 GMT"},"fingerprint":{"sha1":"AE:11:DF:03:20:61:A1:BC:86:47:C3:D3:FE:BD:68:DA:D1:26:B4:15","sha256":"6B:63:D4:D5:6A:DD:58:BC:46:72:8B:4B:E5:17:14:B2:2F:B7:D4:C4:23:C6:64:87:0B:48:0E:DC:D6:55:5D:06"}}},"request":{"raw":"GET /wsd-images-prod/elitlbs2/fe_setting/web_logo/wps_LOGO_20260305123535.png HTTP/1.1\r\nHost: images.3830292.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 5225\r\ncf-ray: 9dc3d2437a550daa-OSL\r\nlast-modified: Thu, 05 Mar 2026 04:35:36 GMT\r\netag: \"69a90818-1469\"\r\nexpires: Tue, 17 Mar 2026 08:45:18 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 45, 8-bit colormap, non-interlaced","md5":"31fa672e6b35138c85e6f215ccab583d","sha1":"05dbe198c8340274b84f9bb6f24120feebd33999","sha256":"4565a379238c0b30405a96581af777cdd3675b32b021398ddaf34f3b3030ae7f","sha512":"2b9de764581b6ef5b88db49339ec925b811286486054443321df9434d904978a5749d4838f31a74f4c8a9a371a0a8cebe0c5c00824cb132b9b365ec96947e2b5","ssdeep":"96:ToAMLnkyzmXkN5UmgjqPigZow8NiZN8QnIrqLYUXerL49ket6Wsq:ToAgkyiXkPUmg0bdnbVI+LYUurL49gE","tlshash":"02b17b3071239efac5b86c51aee80bb9e7a272c19b7e39114924f407e407a714e4fec1","first_seen":"2026-03-14T14:04:22.003482Z","last_seen":"2026-03-18T22:43:16.660613Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":73,"dns":35,"connect":2,"send":0,"wait":68,"receive":2,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/v.1.0.1/manifest/lib.core.min.c9934762.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /common/v.1.0.1/manifest/lib.core.min.c9934762.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 05:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7c066-a0c4a\"\r\nexpires: Sat, 14 Mar 2026 16:15:36 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: HIT\r\nage: 78465\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgCZ784JwjVBcoD%2By9yV8cl6zjd%2Fpbia7V5HLYTuEglJW7X3eMyqwc8Kx5WqeeVZGpFI9XwJO4Mm68aeDfC8hRr0SaiW8y%2FAphMiy3J0DgA%3D\"}]}\r\ncf-ray: 9dc3d246aacb2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":658506,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58057)","md5":"e1a01dd99c771ffd210ea6ceb50d4bd8","sha1":"c0f95605d076dd18c198f5413a1fafd07b53a462","sha256":"2241bf2d2791c67718f1e1b68f74347402c23e237e55c1065ba9c08800fc01a5","sha512":"d50e4f236a2c8145a164678574732a3d48c973c647d08e3b63d022be9c2d4e4daeff3154d521f10bd99fe9ca5a63e05a6e55563ce582031f3528433ace287dd1","ssdeep":"6144:vlTERvtO7hrpJyfa0pwgrzOuL7c5aCm728C5/yb37ti+VTm7ETiwfXG9+:vFktO7dpku8728C5aj7TLT1/","tlshash":"9fe43a8db201746242eb61b5003f1a0ba237552aa40a84acf57ccdde6e7cd4d61bbf7d","first_seen":"2026-03-04T21:43:56.598328Z","last_seen":"2026-06-08T14:29:32.96103Z","times_seen":593,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/ac-control-shanshan.b7303e36.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/ac-control-shanshan.b7303e36.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 20 Jan 2026 03:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696efae1-dd6c2\"\r\nexpires: Sat, 14 Mar 2026 16:15:41 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78461\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jmrW8ZVg29aaK3waCqGsuKWKb6TtqJa32vife9k7jpAOMntou5OIPGwisYcU9073Ps4lhWP1CYpXr0CFtg6l0vLk8W%2FbGOEQzGmka0vh4DQ%3D\"}]}\r\ncf-ray: 9dc3d24acc722382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":906946,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65522), with no line terminators","md5":"b7303e36dd26c4eb1aae7dad46b56635","sha1":"e8bdbedf8692d0e5be85ecd4ac24026fb9fe6337","sha256":"06f9d9892319f817c918afc4b73a6b568497693062b5f32c91e83e1c3b3227d5","sha512":"301339103c9ee7bdaf527ca96bdce855b2f7fd908ea38cbd5b4d566d2b00dd6a6a4fbd81fa3373b7816f412ea93ed0facf3f3affa694e3f772b609ca4506c8db","ssdeep":"6144:qtDthvN/EL4SfNQUQysILiOMjJ1tA9wRh1TRAzD/Xp8w1PLaqmci7F9Y3YbCOGAE:RiUQzA9wRh1G/Xp8w1n8K7","tlshash":"d0150a08b16715e222bb1172a49f670271666a7bd40a4c95f0bea9f11f7cc887373f36","first_seen":"2026-01-21T14:43:40.774011Z","last_seen":"2026-06-02T05:20:53.868321Z","times_seen":597,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/ac-ui-shanshan.4fd61a57.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/ac-ui-shanshan.4fd61a57.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 20 Jan 2026 03:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696efae1-6a8ff\"\r\nexpires: Sat, 14 Mar 2026 16:15:41 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78460\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TbbE3mMdIMHR0RyoMXEl9lIMjUxbQwRD1Sa3PhRglQ0SgUd%2FtvteFwWyDink3xH77iCq6NgLMNPUkhMUWoYhTKETT5osSjJL7UZ7M7j5NOM%3D\"}]}\r\ncf-ray: 9dc3d24acc772382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":436479,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"1da33a96e9761bbfb926c723229b5926","sha1":"746a0bcc7b5072738ce22a11b7033d7b9fa8da00","sha256":"f2ce6a063526275629adcc9b092d2a945ed92477b03093bf7cdeaa5da5a54826","sha512":"35b2ccaa82820ed5f9828de80fd67552315731c62b9b605b3ef9e0578c75caba4520d2c2418809a1c2c328783f011248fd6a77263d69b2dd2cd20b9f1bb175fa","ssdeep":"3072:vjh1RDXBzXrEd+y/cBDiWiiTn6AXvcyt8nmwsTbNi5bSSSSSa5Sbi:rh1RDXBzXr25Sbi","tlshash":"9d946f14b6e70d7254b7d0d99bae2d147a20c337900ace1e3a8c9bd58fc9c29a5f4739","first_seen":"2023-04-19T14:52:23Z","last_seen":"2026-06-08T14:29:32.890645Z","times_seen":2285,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jasmine2020.89444794.com/css/index.570c9ba0.css","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jasmine2020.89444794.com/register","date":"2026-03-14T14:03:19.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /css/index.570c9ba0.css HTTP/1.1\r\nHost: jasmine2020.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jasmine2020.89444794.com/register\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/9.14.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /firebasejs/9.14.0/firebase-app.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.89444794.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 20513\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:29:10 GMT\r\nexpires: Mon, 08 Mar 2027 05:29:10 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 10 Nov 2022 21:00:22 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 549253\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":91683,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"1133a24e73cc67fbf3a9002a2a8d2039","sha1":"08288a1be66c98dbd60f5d59b4e1b5ee23626085","sha256":"4fbb03aabc125045ee2d98be69199bcc01b9cb22aa2e438ab7422303622e0f09","sha512":"7b038fd80befe61ac54039577b161a7623cbef51f4485e6359c18d25c0d710686c2230def5ee72ea48d906292e2b76085a457c5813bdb6bd49c2d0c6d3bb6992","ssdeep":"1536:BCtUasrm5+7CClwUuDoYIt+/dpN/FZ6zeVjfPLXJpzKZyW:BCtvsrm5+7CClw5DoYIt+LN/FZ6z4jfg","tlshash":"4193a82d3bd5117206b253bc6f1ba486f72e822b2606a2d47cad83e40f7255942f5ff4","first_seen":"2023-03-09T04:10:18Z","last_seen":"2026-06-08T14:29:32.620194Z","times_seen":2385,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":94,"dns":3,"connect":7,"send":0,"wait":9,"receive":2,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@thumbmarkjs/thumbmarkjs/dist/thumbmark.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:20.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@thumbmarkjs/thumbmarkjs/dist/thumbmark.umd.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.7.5\r\nx-jsd-version-type: version\r\netag: W/\"7850-V1/hbhfyMYHUfbV8qvcw9gt6rvU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 14 Mar 2026 14:03:20 GMT\r\nage: 29193\r\nx-served-by: cache-fra-eddf8230234-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11605\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30800,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30688)","md5":"127f4803ead92200f8d88c6f27017ce3","sha1":"575fe16e17f23181d47db57caaf730f60b7aaef5","sha256":"a18668be7c6529e4d19d25469caf4659200c4807c10d7dda0659b66a6f887c2d","sha512":"df74eb72029c8d1c81048735f8948f069ecdff29044c28a220394c3bd7d85d089570f51a0745c0746af705baec7cab0cde2b092ac17d0f9e0de8455339bad808","ssdeep":"768:ltNLn7XywGbxLuFZoacL9lmqXn3IwWvWpBDRwpyu37eNl02FXtxv14h36PYgL:H4f2yYmuhq","tlshash":"2fd24db972647027027a2d57a07a9007e13567243a5bc040f22e9d477a97e8f23bbf7c","first_seen":"2026-03-13T08:36:12.258179Z","last_seen":"2026-06-06T14:39:34.316213Z","times_seen":74,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":40,"dns":1,"connect":13,"send":0,"wait":13,"receive":3,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/GCS_merchantWallet?merchantCode=elitlbs2","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/GCS_merchantWallet?merchantCode=elitlbs2 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\ncontent-length: 39\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-app-trace-id: iuc48ym732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQ6LK81Y%2BC4Qrq2Zuqrh3DZ6mjgqYMWE%2BwxZLYQ0lQOgeqXhIVG0%2BfUqOFlhsIRpMhJ6Ea8vq%2BYcSwaft6X3%2BsfqqhcEhkYF091S9n0QODA%3D\"}]}\r\ncf-ray: 9dc3d24629d32382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ef768197e8ae1c45dd35052408dd8abb","sha1":"037b6b95dd67c056e41fb871a45401793e46810d","sha256":"b2ccf7b4106e81339a0204916f3ff80ec80e622efe2bd779cf5407dea7201ff8","sha512":"7aaba3cd36e8f27031d910a479ecca775849468118aae2ea5f9014617f1183113e78835eb31a0e4ea17bd2b16919adcf78677b1bdc5e26e7b58aab790ce8ce5b","ssdeep":"","tlshash":"6690044130000073cc03337114351f50f55c317745001044545cc0dd5dd14451043447","first_seen":"2023-07-05T17:59:29Z","last_seen":"2026-06-08T14:29:32.697089Z","times_seen":1198,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/img/main-bg.9593ea1f.png","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:19.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /img/main-bg.9593ea1f.png HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/css/index.570c9ba0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 874084\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\netag: \"69a952cc-d5664\"\r\nserver: cloudflare\r\nexpires: Sat, 14 Mar 2026 16:15:36 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\naccept-ranges: bytes\r\nage: 78463\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BpOwIo%2BNKH5yEoL%2Fzf9lQZkf2QHPDStRcJ%2FlcGdz28JDw8Uq62R5OqoVp22Tz6VEMUwwlPIYSqvkRHtTZZerI5hfggxH4h%2BgtTyMOyTMyEs%3D\"}]}\r\ncf-ray: 9dc3d239be052382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":874084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 3088, 8-bit colormap, non-interlaced","md5":"84d9b7ec89b156ef314fb106f7582916","sha1":"a115825a0b0918be36ba5c7e8071e7362f24ed35","sha256":"27ea08a648ddd7e412199fb9c8db47dc2ad56fc07754cc1acf78c6ae16280d2e","sha512":"8641c4f0e7b85cb17535b08fd4de87ecfe29d41ab2327dda564d0fe42994303c5729d3892d3cd845e488b2d1aa4210b4703d03773d67bf6ef58bac857ff8eebd","ssdeep":"12288:cGit2gSi93jULEQFVMS6OWAUR/yIws1HdxLDGBkPRJpictBTMW+uW06j+Oh:c9U5bL1FVYOWAUFRw49xGan7Eph","tlshash":"230523ba1dfb67041b6efc63137b73e4c2c6a1974854a0c71a6c9f583f48ac2e21186d","first_seen":"2026-03-14T14:04:22.008429Z","last_seen":"2026-03-18T22:43:16.611464Z","times_seen":3,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/GCSGAME_getRankList?gameCategory=ALL\u0026language=EN\u0026limitNum=20\u0026ext=avif","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/GCSGAME_getRankList?gameCategory=ALL\u0026language=EN\u0026limitNum=20\u0026ext=avif HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: EN\r\nMerchant: elitlbs2\r\nDevice: web\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: 82jzz6a732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3, FREEPLAY3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFlmeBD0Ifn%2BkslwOd9t8e5usAw8JnJzfzNqAd2QHmb%2BlL4rNjm%2BD%2B%2FJxQXRQDxrq44I25pqofq22IIJn0ZNnyyDH6jdyWO3nqvMN6peo10%3D\"}]}\r\ncf-ray: 9dc3d2483ed42382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7292,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dc60f47a407bd133574861452b889017","sha1":"66cea93f2c45a00e392e3c621afd121ef78406dd","sha256":"7ba9d96dc43fa3606c62bcb5d53cc5159f93eb833e1ac04d3d83f8783cf4f490","sha512":"21555c238f7927843e437f435b2ebbd2df35293c82db9d5b8fe849fc5834e01feacde640823ddb1ab7e5df9b34c8bf9382443d668537243235c8c2b0f747048d","ssdeep":"192:M0f03p0ds0Q0G704x0G90nx0Yyd067L0aB0L0Z3070kx0g5KK:M6MpSs7b7/5uyBxBmikNH5x","tlshash":"17e1204aa1ea6ddb46a201e0a94efdddbeeef34f01c68f417b367e180cdc66d5505180","first_seen":"2026-03-14T14:04:22.009178Z","last_seen":"2026-03-14T14:06:08.502624Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.DauCqRTj.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/6.DauCqRTj.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyumqZkcYe1xNo5vizfg6EPLDCFaebrwZJ1g9B6bNouni-ap5xOYb9WQSrzUQd37PLHA87QAoOLDUasRA\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\netag: \"e03e26944f34fc23c489daa84e8fb50c\"\r\nx-goog-generation: 1773396432365247\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 894\r\nx-goog-hash: crc32c=sfeSdA==, md5=4D4mlE80/CPEidqoTo+1DA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-length: 894\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":894,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"e03e26944f34fc23c489daa84e8fb50c","sha1":"fa0c34307b5411bdc2150c1958dbff8d3bf80ca4","sha256":"304ca793ca5c433b23590f0f0e2cb97c88d192768a3d783dec8307d474544592","sha512":"d1a92af80f86a94c190b5d04742fc257fb1b58c5122c7220a840684fd648af122f80bcf58e24d9e338e2de9714b4bf626bba2f5c462bdb7012fbd8f838e7ec62","ssdeep":"","tlshash":"0211dcda3883e0b0d33788cd12ea5071e5385e0821de0080f4e4aece7762b758177d79","first_seen":"2026-03-10T08:28:28.880809Z","last_seen":"2026-03-18T08:07:40.31634Z","times_seen":300,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/11.DJPUQwQu.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxI1Qim4ENYsimTAz91RHp8SDwSWPVlBxjXaRql2seyCufmFo7jbjzq3urcyeHjgPBxMD-1rVI\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\netag: \"640caab52100a1e9dfe618aaeb79838f\"\r\nx-goog-generation: 1773396432317704\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 300\r\nx-goog-hash: crc32c=IuJCUg==, md5=ZAyqtSEAoenf5hiq63mDjw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-length: 300\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-06-08T08:31:34.912615Z","times_seen":29022,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/ac_shanshan.674a8f9a.css","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/ac_shanshan.674a8f9a.css HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 20 Jan 2026 03:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696efae1-da165\"\r\nexpires: Sat, 14 Mar 2026 16:15:38 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78463\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0Gc78g2gbuul04hG4EmOUUya4fWC6pdmfzKAqcLgqNDfNmLBoJF0dOv8S5Fogs%2F08gbHhsn5XxY2bBWseuDQiyAA8Umd4F2W6ZFOTFLxTY%3D\"}]}\r\ncf-ray: 9dc3d24acc7c2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":893285,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3fad8d33bc4469a300a55a7d0fc364cd","sha1":"2b6c4c4f44f32bc9dea2ff41f4da4a4a74525921","sha256":"7ba6913afae9e2414849a046933ff163d5cc1c6547cf0e420e0602b05b474089","sha512":"bd67bf6da70b82e2f274b4763749f889d4cb1eede747ea8dfb0f850b1d34cd1815a52681c72937bacfe5afe8693dc7df8600c0d0238fda6d2f566ab7dedb7adf","ssdeep":"12288:bxCOMik+aIdFqO5DfO2+oGiHBu667HQ0JhlaMkihweT:H5ndbrO2yihu667HQwD7T","tlshash":"8215e936eb47307db62ec11fbe48e1cf2f15c003d50b3e79b940a695c7ed4a42a62a56","first_seen":"2026-01-21T14:43:40.621875Z","last_seen":"2026-06-02T05:20:54.002924Z","times_seen":593,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.livechatinc.com/v2/customer/token","fqdn":"accounts.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:23.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"POST /v2/customer/token HTTP/1.1\r\nHost: accounts.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 225\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":225,"data":"{\"response_type\":\"token\",\"grant_type\":\"cookie\",\"client_id\":\"c5e4f61e1a6c3b1521b541bc5c5a2ac5\",\"organization_id\":\"2c991db3-e6c6-49b7-baac-c633d87bd0f4\",\"redirect_uri\":\"https://secure.livechatinc.com/customer/action/open_chat\"}"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://secure.livechatinc.com\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: application/json\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 201\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\nset-cookie: __lc_cid=4d8a498b-c9bb-4fa9-952d-445681dde639; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Tue, 14 Mar 2028 14:03:23 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=9fc866c71109e79e1b315de0f64e9ec8387b6793035086dd07aef626bb8a27b99c6ad5f230fcb0a693d93921af8eb457a911f5e742d6b83a1448c56215df; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Tue, 14 Mar 2028 14:03:23 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cid=4d8a498b-c9bb-4fa9-952d-445681dde639; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Tue, 14 Mar 2028 14:03:23 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=9fc866c71109e79e1b315de0f64e9ec8387b6793035086dd07aef626bb8a27b99c6ad5f230fcb0a693d93921af8eb457a911f5e742d6b83a1448c56215df; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Tue, 14 Mar 2028 14:03:23 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__oauth_redirect_detector=counter=1\u0026t=1773497033\u0026tag=8ce81282323d010969fac79fee7966aba34ce623; Path=/; Expires=Sat, 14 Mar 2026 14:03:53 GMT; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=86400 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"212e2a732445b85624ab8e7691a50f28","sha1":"66a81b369e23e1dca23fc712b15b6b5342870659","sha256":"84e978610fdd8a7f53cd4eb85b2fb7f47e0da5482a125402a65d7252277d085f","sha512":"57e336cb1e99ae59fd7ac91fa864ba3ec6e4e077d69a61493e513e5615bfefae6a765004c407060f6b2038ac19c3c10fac1e8780e096e988101e1fca39ddb61f","ssdeep":"","tlshash":"5cd0224b39eba88209ea1a0b2dc20a4174201263d1cc0dadc6baf2ed1208a22571a609","first_seen":"2026-03-14T14:04:22.011689Z","last_seen":"2026-03-14T14:04:22.011689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/register?affiliateCode=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T14:03:19.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /register?affiliateCode=jasmine2020 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jasmine2020.89444794.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-58e\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BO71V2PRO%2BdnboSE2CbGvsReMKfwifCtFvWmbZAlsbOyb8fkaMuDCcXSWWQukPJqdF6kzGPPd1%2BzhXmRDikfNxR%2FyzS4VoQromQTfGo6OAs%3D\"}]}\r\ncf-ray: 9dc3d23708722382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1422,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1422), with no line terminators","md5":"a23bd89f6a1c60163d64686b010d0774","sha1":"ce7384a733cf94f6c20d5fe8fe25404b22e84dbc","sha256":"16d1b850e5c592bdf5bc074fa00fe73b52cec410dab356f2f390b4ab7b7a99a3","sha512":"79110096096f7f3447dfcc3d4aae3fd445e31821c95d35ae344a9ad2f6e19c851b27d5127fc22ff6ccb6abdcfe39c4a1eb1692143504a5b98c5a25e733be91f3","ssdeep":"","tlshash":"9521dfe39d0585cd26106a96fcb4f60fcc4f491f8fa0d991b5e9826e84d4bc84406e08","first_seen":"2026-03-14T14:04:22.012464Z","last_seen":"2026-03-14T14:06:08.219125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/PROMOFE_getPromotionAnnouncementCategory?","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/PROMOFE_getPromotionAnnouncementCategory? HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: t3nb6nu732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCtEFU%2Fx5z%2BzQbCAp3LYqdVPS%2FC4%2BKRNEqhG3hm9Aktx8dFPk5IX5kwL6LMT5FBuimx156a1PyX0rd7OvxpRBwgnRNOCa2oAFs%2BnnAYLsQg%3D\"}]}\r\ncf-ray: 9dc3d2443d522382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1288,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"827c738b42d1aeecb633c77c16eda2d0","sha1":"39fb73750445d0c6a3ebb78c01cd0295dcad9352","sha256":"febb3807bae5e16907c09e47af3d3fd9e7602e2cd1d1b63398f072a6240e4b26","sha512":"e13ada9340fe32122d3f9959c61b1c58dd270b39fdbee1ee7b980748a3beac9241c818e38b970b7f3f44963296f5e8a2aa884478513b49d81118db0ae944ecf3","ssdeep":"","tlshash":"b421bc55486d8c74837ca9d064c37db4967c3b03faf41e68519c8678c1f9be0a012b7b","first_seen":"2026-03-14T14:04:22.013248Z","last_seen":"2026-04-27T23:23:21.784351Z","times_seen":4,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=17660244\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fwww.89444794.com%2Fregister%3FaffiliateCode%3Djasmine2020\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__ak5no4c07wh","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=17660244\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fwww.89444794.com%2Fregister%3FaffiliateCode%3Djasmine2020\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__ak5no4c07wh HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://www.89444794.com/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://www.89444794.com/\r\ncontent-length: 456\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":456,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (456), with no line terminators","md5":"7d9357eee601f7b0cf2362caf7d9a72d","sha1":"bfe5eb8f4e76b84f8440170ba1346ae4237057f7","sha256":"49ac3d221ce027c6d7d8e7e8ceed718557616345f584de0224c56aa5a66a3343","sha512":"e9f2167341e93110a6020e0121dee8b7c1d312c295905b6ff9e511d52e6ffeed9bdb94af91ac9f2569ea25a6c566895a23012da6f12fddea9da1bbd0e44730ef","ssdeep":"","tlshash":"b9f05c13b721817056c2eea85654ba0335f48267901128bd7b2f33c0a50f6884320b4b","first_seen":"2026-03-14T14:04:22.014014Z","last_seen":"2026-03-14T14:04:22.014014Z","times_seen":1,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/7.qYTqns9Q.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWx71H7RKUkIx9fUQHIR5pwZK6cexn_U4F3rh9SaOXg6JRdiTsPdhS085vQgcZ6xLcOagpDu6AE\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\netag: \"d541ce2d754402b833cc65b76eaea2c6\"\r\nx-goog-generation: 1773396432374816\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 40\r\nx-goog-hash: crc32c=jQQqwg==, md5=1UHOLXVEArgzzGW3bq6ixg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-length: 40\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-06-08T08:31:34.94511Z","times_seen":29838,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/external-module.cb963217.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/external-module.cb963217.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 02:36:49 GMT\r\nx-content-type-options: nosniff\r\nexpires: Sun, 15 Mar 2026 14:03:23 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0yxKtdUUNlhrbOVy7FYcq7EjVmtyVyIyHbK0UItUrHtkJklol1f2rdhT5ZS92FsXmxZ%2Bw%2BO5IE5hRE0hS570mw7iDNNsqvcPpTZIgP%2BE%2FY%3D\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\netag: W/\"69b226c1-1aa\"\r\ncontent-encoding: br\r\ncf-ray: 9dc3d24afcce2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cb9632171bda82b786fbb89531ad45f4","sha1":"1b36a6c329ac24c7adfe0e10959f04f4bb325969","sha256":"b7760263cba6848749e6cc9376f0d4dfc3485878240848a526ef56ebd804327d","sha512":"3474e573bae0212524c2a9d4f3a9f76bf7c6c558d6ce004ec307c589d18228b7cf9a51365cc778022dc8dbed81e0d8e43b5683d9f7ed23f2e12fd88a7ba8a4ba","ssdeep":"","tlshash":"e6e055ab0247e5015d32bfc7f003b161b92a1735aee8a8c2055449b297140a3f2da818","first_seen":"2023-05-26T03:36:06Z","last_seen":"2026-06-08T14:29:32.8978Z","times_seen":2277,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/img/home-bg.10b2ac93.png","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:19.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /img/home-bg.10b2ac93.png HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/css/index.570c9ba0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 667955\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\netag: \"69a952cc-a3133\"\r\nserver: cloudflare\r\nexpires: Sat, 14 Mar 2026 16:15:35 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\naccept-ranges: bytes\r\nage: 78464\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1JcWOgKuUWClJUxYZ9R1A64e3Wsp%2Bizz8xFWvoiYzY7lARZ%2FXBBvzJG%2BETq1BiwaYaFKs9myzYgdLdRO2ZF%2BIYKgimKDcgivoDfjwiIDWtU%3D\"}]}\r\ncf-ray: 9dc3d239ae012382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":667955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1544, 8-bit colormap, non-interlaced","md5":"606ef6afa099a9328c1a248ea236e09a","sha1":"c9fc99225619e5a3bf83b04d295ac1e474098646","sha256":"8e5badae8076fe662b92fa1a0e9b886efcd112c24a5d59ca718bad2eaf721145","sha512":"fcc9b6ba5625f1e0fc57df478ceef7dca4660a3e68ae56125ff5d4dd79f9e3af3042fec86eda91c4d38d425237cfa00a7375109a3158ddef4a1558fe4af3c048","ssdeep":"12288:vGkcdJxOYy0gyFuFhVWv1OdckZK3ppd4mpIBQLhHHES6J4n:vLcXRgjXVS1OLZIdlhnTy4n","tlshash":"f5e42371d1af3b43a0933c12672cc2caa94c3632b9f99595530fbceaf4224a57e561dc","first_seen":"2026-03-04T10:43:05.09272Z","last_seen":"2026-03-18T22:43:16.685772Z","times_seen":4,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/dirty.4c13559f.css","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/dirty.4c13559f.css HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 02:36:49 GMT\r\nx-content-type-options: nosniff\r\nexpires: Sat, 14 Mar 2026 16:15:38 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5e%2B%2BNWIR1rVt9Zj2JSB9tPu2GMyBOpsyb8CYT36Egh6sGXVXFlz0IdBTW%2BTf9h%2B93XL4AkjNnJFb1JXfq8fIpJBZxBfI3Oqq3PX1mSUdxLE%3D\"}]}\r\nage: 78464\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\netag: W/\"69b226c1-f3\"\r\ncontent-encoding: br\r\ncf-ray: 9dc3d24acc802382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":243,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"4c13559ff2cf62e58402ed844535c81a","sha1":"c24a7fb50a01cb7a0c1185f78f35d7ad413b99c1","sha256":"82408c1ad6ca2f96ca958f71a9269fcb7219f61268641c5840f7ee131d2069e4","sha512":"d1cc15f285da4413786a3d034d1e93884ee7650ed35e04e3081a4d03ad73a5ff066ffddf4ad8bb6669e97d766a4e683abe2c552a9856d31468db3f2fd3cf8b81","ssdeep":"","tlshash":"bcd05b7453c63916cb7396177634d744a172a5c1ce9b333c184b170754fa35106d41c8","first_seen":"2025-11-04T02:12:16.637511Z","last_seen":"2026-06-08T14:29:32.966548Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_configuration?organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026version=876.0.22.493.790.94.2.26.4.1.4.42.14\u0026x-region=us-south1\u0026group_id=53\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_configuration?organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026version=876.0.22.493.790.94.2.26.4.1.4.42.14\u0026x-region=us-south1\u0026group_id=53\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 1608\r\ncache-control: public, max-age=600\r\nexpires: Sat, 14 Mar 2026 14:13:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5547,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (5547), with no line terminators","md5":"e0ed9697fa1363d5aad36f268b7d983f","sha1":"51c6e826c0dafc05dad5cec0f6ac06f91c378fb4","sha256":"c402953cdbb18e6897434300eeda5acc2ee2f26081da8580ea8d3833b8141a95","sha512":"25a3b27fe0abf62de7d6039c838938f3042988c028cae7e3c09bbca8fff4b0e06412ddcdbc39bcd42cf4a5f37a6dea16a52ca145c2fb7695ee0a5653b90679da","ssdeep":"96:JMdHXhQ08bt01bgrd4PJwXtJANvKG88TYFPJvCLq:JMXioIdw5b880LK2","tlshash":"ffb10429834fc8bf6277919963c7b70b35585138b2ec193fe464db34a197283d207daa","first_seen":"2026-03-04T10:43:05.076873Z","last_seen":"2026-03-18T22:43:16.728861Z","times_seen":4,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jasmine2020.89444794.com/js/chunk-web-view.f45651e7.js","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jasmine2020.89444794.com/register","date":"2026-03-14T14:03:19.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /js/chunk-web-view.f45651e7.js HTTP/1.1\r\nHost: jasmine2020.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jasmine2020.89444794.com/register\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/promo-ui/assets/resource/main.DfGRju2B.css","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /common/promo-ui/assets/resource/main.DfGRju2B.css HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 04:20:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7b304-74119\"\r\nexpires: Sat, 14 Mar 2026 16:15:36 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78464\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pFopqYxi0hyBYZ9kMV8CuyF3eyuckesJo%2BiKYCX31IEFqW4wXi4eXFdPEiUlYEwAvuxuX89whCgfVm%2B40eyzluUtKVCknk%2Bcu%2B6MnsVR6m0%3D\"}]}\r\ncf-ray: 9dc3d2414e2a2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":475417,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"faf113cb26e81da764fd0b10d63a7596","sha1":"5172bdea7933c1ef9a2e19b26a4a0b836a28fc4e","sha256":"98c1a21e715cd74540ce0c25296dc2a43284e21c2df547f30b559160c8e241e2","sha512":"06da6a480878c4a8644b29bb0f2dfdf759ca574595ae29e9d013e90277b279388287e7bf7bdb607a3087025bdd08bb2291d937c5be84e03d8af7afe01431b58c","ssdeep":"12288:xtul+DlWLxFxniLe8knAVkYPyLjyzuweg:xtY+5WLjZiLIAVNPyWuwP","tlshash":"81a47d339552331db07bde2857e4229a5228c123d1162afd6da27627cfc77c225f628f","first_seen":"2026-02-28T04:21:48.418432Z","last_seen":"2026-03-17T07:00:36.342984Z","times_seen":84,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/PROMOFE_getPromoAnnounceV2?types=B%2CPL%2CPU%2CPR%2CH\u0026platform=W\u0026version=1","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/PROMOFE_getPromoAnnounceV2?types=B%2CPL%2CPU%2CPR%2CH\u0026platform=W\u0026version=1 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: wzv029y732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQjnN%2Fpap65%2B8liZCdqmdsimbZrpCWUxPA0Np%2FRiHMfZ9dU19YP%2BjoqV3NCa3sg6or8K0mlQC3f7NcHI6gSDrdMpzKNI37vfHwqw2fBBjGk%3D\"}]}\r\ncf-ray: 9dc3d2442d4b2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21777,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8873216cc832a0cb82592e9efce2202a","sha1":"5ba2a146a818eee46bec6f24edf6d2f211baecdf","sha256":"6d8ca71e34f39aff5c41fc6764b0c4ea41ed17cf3d368811020b08e40dc7bcb8","sha512":"22bbcd9a2dfd714d075449686e7ac7c0a2fadac9d8902f82fc6c9b2d2fe1f269057b23b4f11f55824c7a6393210143943f7d66273dacdaf9e3c29a8275a8c04e","ssdeep":"192:4phYL1pAf/w1Awmu7zgQStp1oDjI3QPLeXWPr46Z6J3/KRAlMUeQMAJP/TphYL1T:RfoSTd9foSTdm747g0i4Tse","tlshash":"d6a2854a63b812354e0b11c420ce3bdb16bcb08d76956ed1b28ee97dc4f94b2b572f61","first_seen":"2026-03-14T14:04:22.018365Z","last_seen":"2026-03-14T14:06:08.54941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/ac-properties.0a0ca7e7.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/ac-properties.0a0ca7e7.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 20 Jan 2026 03:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696efae1-1b7b05\"\r\nexpires: Sat, 14 Mar 2026 16:15:41 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78461\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xmy8vJ%2BbXesrO%2BDRqhMOKf7nvOcS%2B%2BJqEHLH%2FmzQNag1RNTp%2BvuxQh9YwIkpL6qvqf4T1%2FNkHkiIlJFDRLzwh8wELcTvyMonBBLrfiSZIRQ%3D\"}]}\r\ncf-ray: 9dc3d24acc642382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1800965,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (46014), with no line terminators","md5":"f1128c7be71e6be80b526f22b5623b93","sha1":"254d2f9609e107a49ce33fa82ba0ffddecc68e81","sha256":"18549dad28e67ab3abd9bf83ed227c80b6ce4de0575c3df21a282b3f426eef63","sha512":"8d9a854177bcdd40c37ea50b0501b706526f901cafe85986574d0d93d15c1886ee71ce20e464328455985d0940903570be3bb400419c1bfdada4039e63cc0fc6","ssdeep":"12288:PQztvN/1EvyZTc9LfVem0ZFjTwDyrQLlQfcZW4P1o+FY/ArhkRcZOGg/JtVhnb3+:PSatT/","tlshash":"f765e5a8ae2fe411c8ee6606754d7b3950a83d229192d3d1ec5f0fde64c9c7c821673b","first_seen":"2025-12-26T12:57:07.344996Z","last_seen":"2026-06-02T05:20:53.874162Z","times_seen":184,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/promo-ui/assets/resource/GIFT.75c0150f.webp","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /common/promo-ui/assets/resource/GIFT.75c0150f.webp HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 609486\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 04:20:19 GMT\r\netag: \"69a7b303-94cce\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\nexpires: Sat, 14 Mar 2026 16:15:42 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\naccept-ranges: bytes\r\nage: 78460\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v5XXGpFKuV%2F3RL%2BB25ExxPqnLg%2BFebbksOhMubm%2F8fjqac7365ZiasJZ5oGU2BHXKB5E6t7wM%2FNt4tbY4qkaE4JIQB8i7zLKsiEPr0CZrOk%3D\"}]}\r\ncf-ray: 9dc3d2517ba72382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":609486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34d0db7bd69b3956225a7f49fc896b06","sha1":"8fb7628cb6c07055c28084310ff6da94407d0482","sha256":"f9e08440c7cd4fc4a19cf8f5d46057de56a6b3d9245855b34fe7e2cdefaef1df","sha512":"b6364a74ffc90f0c89e4fe6c381af2bde42d7443f047b6363c56a0022caf073141c5b5b7c324e27c4bfe51c5ea96ec5b149ca392552ab7fcb9d661b632ef3be1","ssdeep":"12288:Hmw3DC3q2hEhPZpx+i+Qd0Ie8Cuoprc0I7EFTqVUiOB:HmKu3hWXMx84rc0BFCOB","tlshash":"afd42355e39f99bac039e735e04fad61ce03e9c64895ef5d4899e2fb058f22bc140368","first_seen":"2024-07-11T14:40:33Z","last_seen":"2026-06-07T08:04:05.592014Z","times_seen":1987,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bowlby+One+SC\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Orbitron:wght@400..900\u0026family=Roboto+Serif:ital,opsz,wght@0,8..144,100..900;1,8..144,100..900\u0026family=Squada+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:19.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Bowlby+One+SC\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Orbitron:wght@400..900\u0026family=Roboto+Serif:ital,opsz,wght@0,8..144,100..900;1,8..144,100..900\u0026family=Squada+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Mar 2026 14:03:19 GMT\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14946,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ac564e69ac79501928cc02240aa44770","sha1":"e739bfa3b8c45fc24e67e057bbc043ba71502810","sha256":"91e48b11b268a8b9f808aae0c5898a5f3f4bea48bdd15f51481f50c4da8cb6eb","sha512":"6d49dea8b5980644e39f1e7943d4a5dfe1553d88f64fa7891dc091665884952cbcc5e76bcfbadcacff466e9881adab1438dd08e485086648b9ec2bb6e0b1b54a","ssdeep":"384:oRtfcHjg8ciIShwCFnbL8FkurkQ2kBk0kxrXfUcdt:okHICdxjscdt","tlshash":"2262fd91042ba544ea431cc523cf7e36ee4e62517481d579bffe2ce8aceac224364b1c","first_seen":"2026-03-14T14:04:22.020912Z","last_seen":"2026-03-18T22:43:16.67059Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":19,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_localization?organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026version=388cc59aa204dd75bec8ffb1b5c1735d\u0026language=en\u0026x-region=us-south1\u0026group_id=53\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_localization?organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026version=388cc59aa204dd75bec8ffb1b5c1735d\u0026language=en\u0026x-region=us-south1\u0026group_id=53\u0026jsonp=__lc_localization HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=600\r\nexpires: Sat, 14 Mar 2026 14:13:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-length: 4624\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13289,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (13277), with no line terminators","md5":"67c7caaa18894cc920ced3f6ee080006","sha1":"e775b388d4fa6aad612981b92e8d7212360d1764","sha256":"23129724a88e8c64095236b19520bac7343fbc40cd055c480193264257248b74","sha512":"4b92654492feb6bb82a59816b4b908a25a0050510a7f21e4eb34bace7ae1f1ec49147e12c3431b13f06e649417d465626dfbeaa7998719aa19fecc6cd1626cd9","ssdeep":"384:smaZMXVuHnFcC9rizQHoK/pfi3z80CITo5J1sPw:NMHngsTfilCIToqPw","tlshash":"1252b919cf526e7e07a365c6b48fba56f4a950985690043bfccc803c5364bca739fa98","first_seen":"2026-02-17T10:21:07.188729Z","last_seen":"2026-04-23T02:54:58.169682Z","times_seen":614,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/system/country?_=1773497002825","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/system/country?_=1773497002825 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: 70hms96732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0X%2BKPLRt73ePn84hrRc%2BAF1MDvGtwXmpUbAeG2u3fR%2FNIzmf2coJBEYWuMY%2FAH6PccwSpQFQD99T2Su4DULld1qB%2FQ4N80zhb%2FIJ6CcFQc8%3D\"}]}\r\ncf-ray: 9dc3d24d091a2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14454,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (13443), with no line terminators","md5":"fcb4544ecc8a9eb112c4da6639c2925c","sha1":"99f0e0948a517f8dd0220fe371b095f153fc2b74","sha256":"0587aa2b6b8f2239ab9a458e5bf41ebd3ecc12770cd00b2dea2b012b795e9dc5","sha512":"d845e6e2a95f66656b67f4d286b0f6010811b0b1ff561d146012622f272d34dadd16faaa3a6360688963e535fb5e539a8a0e06a772f0d423ca8073e0a68f9e3e","ssdeep":"96:xjOZwkPVnUSDUx5hxFDHxk5ViPDFthda8fTL6lkD+kavc/o9Md2aWPaCKxm5OGek:/YNgSHwxwwV51RmS/Zvm","tlshash":"d8526a3e640ddfaefd76ffd9b04f362554362944d2b8240acac05b727b95afd21210a8","first_seen":"2026-02-10T11:14:14.831101Z","last_seen":"2026-03-16T01:41:39.85424Z","times_seen":57,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/system/settings/consolidated?_=1773497002825","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/system/settings/consolidated?_=1773497002825 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: wmnf7g8732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2SWw2MFIFq53d5qGs3kLIyI0Vim%2Fek%2FHsiThkJklBUlGnvSaB62hIk9DrNgbWBxKQV8XpXEcUJb%2FLdWCPUt8vlqFlc778SBdWpBSj6RktU%3D\"}]}\r\ncf-ray: 9dc3d24d09242382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38302,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b9fba18ff6967a8ab4ce71f7300bccda","sha1":"e79790d745b9ee89dfb1a73ee3b709d9921c31f6","sha256":"c3cd260ad91472b54be08435d358f5ada6d96e4b10e84655b79c2517e84edd94","sha512":"9b4b666d85b1db3cbbab93bd0ab51c08a3201fcfd8576b6ff3a746917e1b6cb4f12f93a765e9b35e72675d26c96c57ad79278f283272496abbbb0feeed1f93cb","ssdeep":"192:POckhuImFlAuLbV85l4a3LldHk9Ki1hCF5BBO5wOUkR1JADQXxvu6dCCI46UJ+Kr:PehuImFnLb+5lm+C7h5CEsW3fzp","tlshash":"9103cc09a430e9af2d4ec0c4e4fd991b49ed4e7ad5fd00719c0c28ad12eb9a60757be7","first_seen":"2026-03-14T14:04:22.022844Z","last_seen":"2026-03-14T14:04:22.022844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/promo-ui/index.js?_=1773497000715","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:20.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /common/promo-ui/index.js?_=1773497000715 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 04:20:20 GMT\r\nx-content-type-options: nosniff\r\nexpires: Sat, 14 Mar 2026 22:03:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1yncrk0v70JoRZtDYdLaCjFamN2bxo1J9A48gbIWBEqxmi%2B85KB8wb8uDNhVMTTIWYP9wrmA%2B6fYcq4FGeXPLBs3prmCHk4FJAcAEADl7ww%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: max-age=7200\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\netag: W/\"69a7b304-36b\"\r\ncontent-encoding: br\r\ncf-ray: 9dc3d23e782d2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":875,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"112af4a535abce46a1027d3f157a1bc9","sha1":"e1514e9fcea58298fbe11f7df686fa11d2917335","sha256":"0a18f72203fe0daca9f47f66b298e8b2faf1ec228834d1b7df911b3cd2582754","sha512":"8dc5b4dabc2326d027f5b803ebc505b107ed5e8231b5c1ab59cb3885e3870f89181e10ebadf8305d51c3654e01f897ab0aeaa4160b1bbb390f411c313344f8e0","ssdeep":"","tlshash":"4111881e9bf780d864bb309f97ae2404329182875021d591355dd8a2ff54da003fdeec","first_seen":"2026-03-04T10:43:05.094527Z","last_seen":"2026-03-17T07:00:36.275287Z","times_seen":50,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jasmine2020.89444794.com/css/chunk-vendors.e93b14f5.css","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jasmine2020.89444794.com/register","date":"2026-03-14T14:03:19.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /css/chunk-vendors.e93b14f5.css HTTP/1.1\r\nHost: jasmine2020.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jasmine2020.89444794.com/register\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/mc-control-shanshan.0b33d03b.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/mc-control-shanshan.0b33d03b.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 02:36:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b226c1-1330a5\"\r\nexpires: Sun, 15 Mar 2026 08:10:38 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 21164\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VrfI1oIE9EsSS0Qz3BGmreOmrHWCoJQ4Anfp5NjZ1VPNU6d%2FAwCVwN03Zgw9vL1psk7sAx0hWwjDM3b1j5%2BhvSeTBgu8cgKcI86gzdCxzco%3D\"}]}\r\ncf-ray: 9dc3d24adc902382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1257637,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65460), with no line terminators","md5":"48f779af04d6fc707acbf9077a3676f2","sha1":"66d52bc44c6e9b5723b3b87a4c1daa9276234e75","sha256":"62370453937f9f31edbbf18d6621c0b7e9db3396e48311f600f6d34c9522e7d7","sha512":"99aa320b77c2c640cfb6cec3c00c68524b33473f08c32237f9f8c4cd7f0dde921b2e59f1a1bcff76e00d4005d90c8a7ce214bf60afd26db3597727a01d0fcdc7","ssdeep":"12288:dTyL+WIElFndtzZWJMMC2msVEjZ2BLmNacum/4H1jKDkcah+ibCskUcprGQZRNJn:dTWVI2dtzZWX/zHRKNNJoXUdZQVeJd","tlshash":"65251a4871e661a21177716a605f6605262a7e33c00e0851f2aec9f1afbdd85f333f7a","first_seen":"2026-03-13T11:40:16.291062Z","last_seen":"2026-03-17T07:00:36.282341Z","times_seen":21,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/system/country?","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/system/country? HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: 8tgr9xd732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUpNkMZr7CIZctgQ1eKbxKwAWW9CROqZtgkI5PKvLEooBlpR7DH%2BhLORkq4N3vjo%2Ftv%2Bkgz%2FgYDYrIIY5au1mHWHOqH47sfvEWJHUSc9w%2Bg%3D\"}]}\r\ncf-ray: 9dc3d2443d582382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14454,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (13443), with no line terminators","md5":"fcb4544ecc8a9eb112c4da6639c2925c","sha1":"99f0e0948a517f8dd0220fe371b095f153fc2b74","sha256":"0587aa2b6b8f2239ab9a458e5bf41ebd3ecc12770cd00b2dea2b012b795e9dc5","sha512":"d845e6e2a95f66656b67f4d286b0f6010811b0b1ff561d146012622f272d34dadd16faaa3a6360688963e535fb5e539a8a0e06a772f0d423ca8073e0a68f9e3e","ssdeep":"96:xjOZwkPVnUSDUx5hxFDHxk5ViPDFthda8fTL6lkD+kavc/o9Md2aWPaCKxm5OGek:/YNgSHwxwwV51RmS/Zvm","tlshash":"d8526a3e640ddfaefd76ffd9b04f362554362944d2b8240acac05b727b95afd21210a8","first_seen":"2026-02-10T11:14:14.831101Z","last_seen":"2026-03-16T01:41:39.85424Z","times_seen":57,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/index.js?_=1773497000710","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /ac/v.1.0.1/index.js?_=1773497000710 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 20 Jan 2026 03:47:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696efae2-4b49\"\r\nexpires: Sat, 14 Mar 2026 22:03:22 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: max-age=7200\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MnY%2F6rdFSqvKQZUSUu0fTH7s9lDj0%2FetnDy7EU77CeB7dLJHCejxXQf75gcF%2Fp9R0n0eXQXABC5JpuV83o4%2B%2FNWK0qqO6KCJgxWBHagbURg%3D\"}]}\r\ncf-ray: 9dc3d247bd882382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19273,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19272)","md5":"2e7ca135044dd1fbd97ccf3298d0cb84","sha1":"bcf5c83439a66cbc56813f48493857e7cb6a6cd7","sha256":"35132558673cb74430e124e8f346f40442ab02422d47a9cde2e9ef7974609d85","sha512":"f3512ca29fa25e521713912e2a3ea671207b06384d7327568cadbf75e392204a2450790b9ff3db3a042295b95f36024fa6f047be8768cc7dd2fe6a9f8e8c5d4a","ssdeep":"384:ljOIzhu7En2roI1k/WaHjnFw73LeH+whSwoxzYMNwU30CkCPJi4axcNayjL+4ljn:4sBCg6l5CRn5a+AjwE69G","tlshash":"068233562d0f512d0689f5ab78804d6d7eff4ab21ac41d2db2ac8e7cc06d90fa9c93d1","first_seen":"2026-01-21T14:43:40.798717Z","last_seen":"2026-06-02T05:20:53.842283Z","times_seen":614,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.3830292.com/dev-images/GCS_VENDOR_EVENT_IMAGE_ICON/8103.webp?t=1772070123491","fqdn":"images.3830292.com","domain":"3830292.com","tld":"com"},"ip":{"addr":"104.18.28.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3830292.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:38:11 GMT","end":"Fri, 17 Apr 2026 03:38:07 GMT"},"fingerprint":{"sha1":"AE:11:DF:03:20:61:A1:BC:86:47:C3:D3:FE:BD:68:DA:D1:26:B4:15","sha256":"6B:63:D4:D5:6A:DD:58:BC:46:72:8B:4B:E5:17:14:B2:2F:B7:D4:C4:23:C6:64:87:0B:48:0E:DC:D6:55:5D:06"}}},"request":{"raw":"GET /dev-images/GCS_VENDOR_EVENT_IMAGE_ICON/8103.webp?t=1772070123491 HTTP/1.1\r\nHost: images.3830292.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5556\r\ncf-ray: 9dc3d2518f9c0daa-OSL\r\nlast-modified: Thu, 26 Feb 2026 01:42:03 GMT\r\netag: \"699fa4eb-15b4\"\r\nexpires: Tue, 17 Mar 2026 08:07:14 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 366969\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"97b0382ec57549fc17eabb792827cce8","sha1":"e59d0869050a91a862bc39befb8f379cda56d6c5","sha256":"27840c026ef25cfcf94d4f0c8945ea3513015e5cbc4d3933b6c6e7fdb0e645ba","sha512":"a04b943c9115b107b312da3b75a9e04f2e97e8836b32ee52de9b703abd6e7c1fc709abbfe2dc3dc9b460c59472954135a76797c56b79ee835c4b467ac9000b3f","ssdeep":"96:Eo1FovOIzHJAGRar7ma+Mw3UI+QzTMbAnDpooMwXN1RyeV+YvNWAJS:EjFAl7fyEI+QzTMUD6oMwXhyeXvNm","tlshash":"cfb15e479f79f5b47b22056101e00e6b12d7926fa02f0a31db28b5d86c3de65525cb92","first_seen":"2025-12-05T16:05:15.588918Z","last_seen":"2026-03-30T07:06:06.104478Z","times_seen":138,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/js/chunk-vendors.e5791b68.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:19.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /js/chunk-vendors.e5791b68.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-1613c2\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 13:31:24 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oE5yrKoTksbvO9GHXxmFSPJco4qxfADe%2B2uiu9gCQHwhThZjmPvyLLEKVtQ3OHti6yX7OOUyOE%2BfbyURxPm31MLt%2FwF%2BLUPnNQVF6MeVqZ0%3D\"}]}\r\ncf-ray: 9dc3d2389bdf2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1446850,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38448)","md5":"a36b6b081ec6eedb2e52ac80678bb969","sha1":"cfa21cac1840532b64b311b03ba0fb60940bbdda","sha256":"be3e0b75dbe328c9e4a226cba14c2f3396b4cb8c68c2e4660f23bb489066e197","sha512":"21582a4a45b5b5d66519214a93d5457e026bef25b726963ef41b9fe193e637208974b63701a5a31a482d2e08c3047a049a7a38b4b3aaaea16789ea51a027ab83","ssdeep":"12288:Y6cyz5imk9iVKnkS6iFYU01GfYR+CfsJPPmNQiAZG9v3X5RhhNWwo4ZpBM/7:Q6iK1GfYR+bJWNQiAY9v3X5Rl+","tlshash":"de251afc729170a647e761b5002f180bbb7a1e67680e8054f265e8e67c78a0dc677f78","first_seen":"2026-03-14T14:04:22.027111Z","last_seen":"2026-03-14T14:06:08.545617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.0/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.0/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.89444794.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27437\r\ncf-ray: 9dc3d245aca70883-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659afac8-6b2d\"\r\nlast-modified: Sun, 07 Jan 2024 20:26:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 129055\r\nexpires: Thu, 04 Mar 2027 14:03:21 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Plcx8Rp84IkqdgrPylnnZzIwBrH%2Fb8OoTMbcvx4x7qMjCNnz4144uMs6rrfSLVy12Dk3rguIC67DBLN31Kdd4JncZ%2B%2FWEwyhX40xrd8ZgM6qpLIpKufdy62AwIexJJb%2BJNYSpnk3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87462,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"e6c2415c0ace414e5153670314ce99a9","sha1":"5a9eeac34d86e92e5660e0f4f87204f1ed0c8ff6","sha256":"d8f9afbf492e4c139e9d2bcb9ba6ef7c14921eb509fb703bc7a3f911b774eff8","sha512":"de027062931edd07b01842eff24fc15fdbdcaa1af245dcd133155faba9e0c965f0a34dc6144ce3b149bc43b4597073c792cb6dabbfc6168c63095523923bcf77","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKV:/u1zNwcv9qBy1HOg8SMpQ47GKV","tlshash":"9f83f8df77ca702247ab30b9006f550bf276199d684d4400f259d8e9bc78a4a823bf7e","first_seen":"2023-05-12T23:07:48Z","last_seen":"2026-06-08T20:33:03.418224Z","times_seen":29126,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":203,"dns":13,"connect":1,"send":0,"wait":21,"receive":2,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/GCSGAME_hotGamesV2?merchantCode=elitlbs2\u0026isPlatform=2\u0026vassalage=\u0026platform=flash%2Chtml5-desktop\u0026language=EN\u0026ext=avif","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/GCSGAME_hotGamesV2?merchantCode=elitlbs2\u0026isPlatform=2\u0026vassalage=\u0026platform=flash%2Chtml5-desktop\u0026language=EN\u0026ext=avif HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nLanguage: EN\r\nMerchant: elitlbs2\r\nDevice: web\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: 89kteqq732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: GAMELOHOT3, FREEPLAY3\r\nx-elapsed-time: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sKBVYwvPn%2F7ggXS2DGLR8l7H85sgBHWT%2F9NZdZn4ykCrZMD%2BAiPe5ie6rHT7cYxGijWsCms0Uda2qywNk7YJs9DsIc8gQf3N0YOu00qziB4%3D\"}]}\r\ncf-ray: 9dc3d2483ed12382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34418,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b0913e289726c3391f90f44a6d17bc56","sha1":"4ccdead9eb4a96fd8671348a87d44c0fada1ebd5","sha256":"f720d57f90da8f68616d1a2f09ca7245e14f0d58f90326e6970233cabc2db60d","sha512":"106fe53120ced0347dc1831b20004f0141a03107922949251c35f2e6977c423a81e0b9936fd6a9a42cc443530c5d90481b19b97695ad214e8161a07aa93f4176","ssdeep":"384:Dp8AfSiHGzQwzEabpIMvr/l/LZIx2NT7pVeNgDi8YD/qavbdY0bZKZ+Oz8XfNpe1:lkgY7ZN5tDo+FT","tlshash":"08f2c289a2586cca17790af4208ffeeae8fc059f44c5dfb462a49f1509fc73c6309659","first_seen":"2026-03-14T14:04:22.029023Z","last_seen":"2026-03-14T14:06:08.445313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/PROMOFE_getTicketGlobalConfig?device=WEB\u0026_=1773497002829","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/PROMOFE_getTicketGlobalConfig?device=WEB\u0026_=1773497002829 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-app-trace-id: gnqsuti732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: REWCEN3\r\nx-elapsed-time: 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JtuvJvCXVIn8Mp6h6z6X7x7wA1eHBY69w1fpf2itc8m2XD48JqY2dSWVWixIvS%2F9Sqe4gjhHMUsrrakxwAF7jIkc%2BS3WX0PgP7KO4E7rRqY%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9dc3d24d09262382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"da84949534d76a885fb603c3868877e4","sha1":"8e0f4913c9ad480cc3277a4c53af5a5669496c74","sha256":"a6e011546286021a6ad4d111226842f30475fa95515682804832ef421a41f486","sha512":"441bb271f01bbc0e7b5a2763b11eb3bef91b6109a3a25eccd25b9b7a5356cd2778ec3218fa7743ca20bba671d13f58630f0954547e0a5511d0ede88fa83729aa","ssdeep":"","tlshash":"c8e07d3d30820c3384a356e5819318c3f41e837654444d4c4c9942063405b043cef54f","first_seen":"2025-09-07T09:32:23.285037Z","last_seen":"2026-06-08T14:29:32.751869Z","times_seen":706,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/system/status?url=www.89444794.com","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:20.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/system/status?url=www.89444794.com HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: x6esmbv732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hy80yfKVhoML%2F1ruopX0K%2BKJM%2FJRWoqle3azoZzIzY2nTgPF%2B3grzP%2Bd2ZFB2fXhZAvoXM6wDoL07Ep6GwpbLtwY%2FI0NICfrumfVZAS79o%3D\"}]}\r\ncf-ray: 9dc3d23e883c2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38525,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c2f0b62184ed07f4192db7c464530f7","sha1":"a4ad2d1782e520dc42e79ca216858d90256eec6b","sha256":"c3262b6f60c4bdd5776edf898f7c147e08d88d2dd687f488036675d3627b25a2","sha512":"2d71db0816bc931f6273d4e1b74136ff245e369dd8b15ba18e4797b362d8fefd30db6004de21dbb091651a39167a6f00ff2178633b25b412b78496cee342b34e","ssdeep":"192:5OckhuImFlAuLbV85l4a3LldHk9Ki1hCF5BBO5wOUkR1JADQXxvu6dCCI46UJ+KA:5ehuImFnLb+5lm+C7h5CEsW3fzq","tlshash":"be03cc09a430e9af2d4ec0c4e4fd991b49ed4a7ad5fd00719c0c28ad12eb9a60757be7","first_seen":"2026-03-14T14:04:22.03046Z","last_seen":"2026-03-14T14:04:22.03046Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/decimal.min.b4a075bd.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/decimal.min.b4a075bd.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 20 Jan 2026 03:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696efae1-32f3\"\r\nexpires: Sat, 14 Mar 2026 16:15:41 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78461\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FEz510Y6iQfdt%2B8shjKvENy20UEvrWwtLQQ%2BewJsKZhy2NapGF7yxnqbK%2F8Z1xPF5obC7ptAEFCBftPt%2Bjyli85ml0UqV1u93wwZmmfH9E%3D\"}]}\r\ncf-ray: 9dc3d24acc5e2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13043,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12960)","md5":"b4a075bd6623180bb38318dcf2542f58","sha1":"64207af61a67ff855fd152ca4dab1532973e5db2","sha256":"25dd4d16d5fd3c4ac796badcce3ec057d92c52255f8d8481570fb54549dac5f7","sha512":"f20bc2a23070cc656266fd0b654aa6270a0864a3c413fd4ece9bd3630423266829eafc39ef7f32728c97efdc5da834e89c840409e4adc0ed53004897f01341ba","ssdeep":"192:ZusyVYg81fsu05u9gpxe5afH5NVcvqfMNlkdOYiO5PjVYCrF1FVWJK5gDArHx:wsS4OogpxcGHjcwGO5PjVrrrFcJSAArR","tlshash":"1342c5d872b1f0d683f364e040db1406e13a6e49688e61e2f34985e23cb5ec6917ffa5","first_seen":"2023-03-07T12:04:54Z","last_seen":"2026-06-08T14:29:32.706606Z","times_seen":2302,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/ac-wps.89824b45.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/ac-wps.89824b45.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 20 Jan 2026 03:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696efae1-cf39\"\r\nexpires: Sat, 14 Mar 2026 16:15:41 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78461\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BC%2Fx6Bf%2BNGe1IswW54sTtYNOduujtrjXC2FUaavNfACqKdjJq9xFLbKMV%2BhYLyacEN7xgpwsYO7wSBKh20uL7uy%2F40WCvan%2BMuFL6Q5uN84%3D\"}]}\r\ncf-ray: 9dc3d24acc632382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53049,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53047), with no line terminators","md5":"89824b45a2b94e9b1cc8c694c33f1a67","sha1":"29107254ad8a5c612c61ddfb7aca873dca995799","sha256":"996bbffa52661216998b712c39b0bb7207d45e8f98211cafb3a7c5db0040ec29","sha512":"fb4562aa6f72f4680d73085310ccef27d4ce41e221679019b0c2b0d28ee219cafa2966d10dcf8872c0655ad1bea1f2d3e00cc6a3a346fca87220092c2e8d57fd","ssdeep":"1536:USCAKqw8hylWOdSf+km+XR0w10Ok+KNWHR0cR0uRGvfouzI:UnE","tlshash":"f83333c8f881ad8f7567753acc6f6b1d05377b4de0700eda818b656a1eb144da023be8","first_seen":"2025-06-26T03:49:13.147356Z","last_seen":"2026-06-02T05:20:54.012464Z","times_seen":1571,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/mc_icon_s.0fd68d55.css","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/mc_icon_s.0fd68d55.css HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 02:36:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b226c1-bd5d\"\r\nexpires: Sat, 14 Mar 2026 16:15:38 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78463\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tvmes4%2BNmuurQrf6o1pZs7x5r1dQkb4GlHaq%2BenCgKufXylhge4vJ9CxKWAZgRNqkSd%2FileESjyee5%2BxsuYmLuS1ws1L8t%2FxOtzvKMAWyOc%3D\"}]}\r\ncf-ray: 9dc3d24adc992382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48477,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (19771)","md5":"0fd68d556c238d7b30cfdb73444776a4","sha1":"044896b598ab35d3dfa9b60da362259f7e32d599","sha256":"58d51b59248c18d27839d3073ffc1d6e5f5077d53edefb17bc375561ee5350d4","sha512":"4ab66990d9b20b1f5a5ff20bc02211c8c349518331ccc0ca8f409f803605701e60e6c30787fb3d96665855b0bdb344bc723b2d7600980f0aa5b35dd75768f4bd","ssdeep":"768:2AGSz4TYCGRYZazCrr5H3EcvlV4ehTP5uO8P3m7MF7MNP0w6Bfw9rnsiPuxY:2SKYCG2NUGV4eh5uOE27MZMiw6IrnsiJ","tlshash":"3d238f37890b7c902a2c2dfbcf673c5c5f69e18395934bc4e5dd4ce8a41a6261e0976c","first_seen":"2023-06-27T02:10:19Z","last_seen":"2026-06-08T14:29:32.844565Z","times_seen":2138,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:19.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.89444794.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Mar 2026 00:52:29 GMT\r\nexpires: Sat, 13 Mar 2027 00:52:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133851\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-08T21:14:41.121033Z","times_seen":508972,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":139,"dns":1,"connect":80,"send":0,"wait":15,"receive":17,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jasmine2020.89444794.com/js/encrypt.js?v=18836","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jasmine2020.89444794.com/register","date":"2026-03-14T14:03:19.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /js/encrypt.js?v=18836 HTTP/1.1\r\nHost: jasmine2020.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jasmine2020.89444794.com/register\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-118d6\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 14:00:43 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 156\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FIpCVxjpzZdRgztpLtS4aNYQ7ovnh%2BAPvoZ4Ye8bz2dubdxzx7Uh7ne24kurzuI3Ohy4BMrSUQVt5qBzvMM1txLqjuL63OBlnIf4RLvvPJsULKH8BRnjEQ%3D%3D\"}]}\r\ncf-ray: 9dc3d2364eb62382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71894,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458), with no line terminators","md5":"600906fff093ac452fd325ec43d60589","sha1":"ec186fbbfd8bea0f5af2d79c3b17b8126360452a","sha256":"d65313dd3770113be6f85c42a1780dc0fc2fc7320d4c8b243428c035ba132e03","sha512":"b932a89314707992a9af7f369ae25ff68a79e814e257834697328c96837ab3563fbb52bbf841a5257ead01a6779249b7bd28135c0d5388adff0147a8f433f745","ssdeep":"1536:iFgw8Kye/AepW5dYrSWsw3uaoeVWG+lirxvYmT8LCRb:igjcw5dYrSWnrxB","tlshash":"af63a8a1a6a06408c3c79b2a771b71eae02e75667cc14c4bf214ff586f88b17f6d1930","first_seen":"2026-03-14T14:04:21.993803Z","last_seen":"2026-03-14T14:06:08.504022Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-03-14","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"jasmine2020.89444794.com/js/encrypt.js?v=18836","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"images.3830292.com//TCG_PROD_IMAGES/B2C/libs/gt/boc.js?v=1","fqdn":"images.3830292.com","domain":"3830292.com","tld":"com"},"ip":{"addr":"104.18.28.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3830292.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 02:38:11 GMT","end":"Fri, 17 Apr 2026 03:38:07 GMT"},"fingerprint":{"sha1":"AE:11:DF:03:20:61:A1:BC:86:47:C3:D3:FE:BD:68:DA:D1:26:B4:15","sha256":"6B:63:D4:D5:6A:DD:58:BC:46:72:8B:4B:E5:17:14:B2:2F:B7:D4:C4:23:C6:64:87:0B:48:0E:DC:D6:55:5D:06"}}},"request":{"raw":"GET //TCG_PROD_IMAGES/B2C/libs/gt/boc.js?v=1 HTTP/1.1\r\nHost: images.3830292.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-ray: 9dc3d2436a490daa-OSL\r\nlast-modified: Sat, 04 Oct 2025 00:35:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e06be3-3429\"\r\nexpires: Tue, 17 Mar 2026 08:07:18 GMT\r\ncache-control: max-age=604800, public\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 366963\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13353,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"845e2236627b939e57fb462ea29ec554","sha1":"9e3bf49321d552ec26777a8c6d9bf71530f47bef","sha256":"cf2e948263c1ca01e8f6e163439d99a176345e0a41bc93104608f675b2f4145c","sha512":"b3f6919c720eae8d2aa4f12a9657d936c5c52206ca2bcec44920c2d76be5fce6be8e2c5bf1dab20aef890fc11a149321c7199a0e44296f51e7d77878d6dbda39","ssdeep":"384:OcB6Y6+HiaWSXauU058DIml6yDwFJQqVqB:OcB6Y6+H9HII22ze","tlshash":"1852114d68f7609385a3b428ca9fa114b9788a57002ccd85bd4ce3589f9447c9bbbfdc","first_seen":"2023-06-14T14:59:52Z","last_seen":"2026-06-07T00:59:55.285207Z","times_seen":523,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":67,"dns":30,"connect":2,"send":0,"wait":30,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/GCSGAME_newGameVendor?platform=html5-desktop\u0026ext=avif","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/GCSGAME_newGameVendor?platform=html5-desktop\u0026ext=avif HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: dzb5jjb732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7X%2FIVhHHU9FYXs7dCMpJB93yc9T7cn0snLMfLaOIeh2F%2BejlktYlJ%2FaGn9afL3j%2FUqcmCxLXBTN68ihJTZ5urTa5tP6L7CGdNvowYdD%2FiQg%3D\"}]}\r\ncf-ray: 9dc3d247de092382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38364,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"57fbe365cb740705bb52d7b65cf7362b","sha1":"3fb8bc125f98cc45d17c5933a021c1713896ea39","sha256":"5fa20fc38d1120451995273f02a1b89e7ab4a00e0873f260f182063a8724d55e","sha512":"fc1e8e26d68bd6bcbcb9eb52489b9e9eb8262ec930fd07dc8e7f8c40d185b71caef1f33b2aa1aa388ad8fd116c5908de8b33a9b01bdf8fadc716b7881c2d6a1a","ssdeep":"192:0oRYI/B7vvy9Xqxci5lbLz+psoImBx+lK7OZ1AxKixnTxoLm4wmxElxBWXLxONiK:LKIp7S96xci5lbLzU5IuvN40eX+pv","tlshash":"c00332dbf1f8b83703b206d4358f7a49961f411facc0b755b5a85e09d8f8ea853a43a4","first_seen":"2026-03-14T14:04:22.034311Z","last_seen":"2026-03-14T14:06:08.487922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.CUeOvSYr.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/livechat.CUeOvSYr.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwBgwgU8UaJVyRqgpBIiBfXtj0LjCXU9NwxD1fQYIZQGzVA1sU0TEBwLY5wVs869tnUdJL77E0\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\netag: \"9f0ebcc724c619c9833a1c112e421d26\"\r\nx-goog-generation: 1773396432400610\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 401\r\nx-goog-hash: crc32c=+7pyFw==, md5=nw68xyTGGcmDOhwRLkIdJg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-length: 401\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":401,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (400)","md5":"9f0ebcc724c619c9833a1c112e421d26","sha1":"57cd31d16f718601f3844a3818e37a8f3dd0c141","sha256":"abb77b9109bf46d0b2dbff084b7733ad5abddd4dc65b121ec89d4fe7101eaf24","sha512":"d31e1aac67266848cfe3594d2402fe2f3b23a2a21a2ef23e672e01287512ed50e59dd2483b87c767c31197ed77ef388152a0f93f73ce414368f0cfb44834f11c","ssdeep":"","tlshash":"a8e0cacae3403ce3f5d9dce4c858e9a296f3239643e083a090ce93721310025ce45a02","first_seen":"2026-03-13T10:18:05.334913Z","last_seen":"2026-03-17T23:41:17.890556Z","times_seen":134,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":2,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.B2M_fyvk.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/3.B2M_fyvk.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWz2T45YezEcL4M2yue8-UotOSXEP2HvNbIcwLEnwGdT2Mttz4vhZs0VIW15zi4-NrKpxD-waFsb7fuAww\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\nx-goog-generation: 1773396432416265\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 138438\r\nx-goog-hash: crc32c=6dyE0g==, md5=j8K+zsm7tawGmqNEaLdiFQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 43576\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":138438,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48033)","md5":"8fc2becec9bbb5ac069aa34468b76215","sha1":"8a7dc639ebbfd8beb2ad59fe57b9a63b7a7f18a1","sha256":"570206c6c8ec5a0c0eff5a74a683a6dccbb08a24a5919ffc5be31680c27b4757","sha512":"72dd74a528d7ac7229e3f599a179b34d74f2eeebe24cda1598736c8c8e49e328094a505b12c562e554f5f4784d224be797a3cb95bb794246ed2d9f95cb4b3281","ssdeep":"1536:vgZQUuQC6WDvhFCvB0Hx6J+vXlKAwTwH7nDPWnYlkChX8qg4JklHYD82:vgKUuQPWDvhFCp0UcDOnA5sFikRYD82","tlshash":"fbd3f8e83992f5626bf312b700af5817733c192b280c4990a211fdddb5b845ea17bf9d","first_seen":"2026-03-03T14:45:10.188122Z","last_seen":"2026-04-09T10:49:40.066961Z","times_seen":977,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/ac/v.1.0.1/manifest/numberSeparator.01b17b54.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /ac/v.1.0.1/manifest/numberSeparator.01b17b54.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 20 Jan 2026 03:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696efae1-526\"\r\nexpires: Sat, 14 Mar 2026 16:15:42 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78460\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RuPXVtXUTbxXHUxnQch7NvIfHqq54v5jGzMWCfgxcMW3mdIuv1%2FJn5VdI8CWHEjGY8StCubWN6sayVDL49zsaXI4roxph6pHTNsaMfDACkw%3D\"}]}\r\ncf-ray: 9dc3d24acc7a2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1318,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"01b17b549ad285136b8cb7ec0c7ec291","sha1":"7c721fd5c8da887f7c067a488d88f5fa538e3029","sha256":"959a2c44941d0318df9e0a3776c30393f74d50c9e46d113ea911360c49a621d5","sha512":"296a7cd6d1d6741ca17d884989669b2563ff352143111629947c93892d784738d772de8a00ea99d6c2758f13065e775ab232be33fa7020f7dc4493c2a6372db2","ssdeep":"","tlshash":"d0217d5836b700124d7fb0e98b8f52025b2126577484da8fb62cda947f02c2be2d36fd","first_seen":"2024-04-23T23:35:41Z","last_seen":"2026-06-08T14:29:32.726347Z","times_seen":2185,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bowlbyonesc/v27/DtVlJxerQqQm37tzN3wMug9P_g_2og.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/bowlbyonesc/v27/DtVlJxerQqQm37tzN3wMug9P_g_2og.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.89444794.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 16:20:05 GMT\r\nexpires: Wed, 10 Mar 2027 16:20:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 337396\r\nlast-modified: Mon, 08 Sep 2025 17:58:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23708, version 1.0","md5":"70bb3c1ab24694da56d81ebf10242ff8","sha1":"6c599a904887f36b937c527f7aa2d0708b129851","sha256":"c6860ffe6f98701c1b0cddad6f6cf7d57ec1b1226647c9f7ba45a3bf5ce1261a","sha512":"65d6e3b286a9aeab24185ad0ffc2f7b62042076ae134917390f05a9bb4753268b1e1aee3fce89a5e342c15b8c0b806db4867e2a50e2d07ee152918374965d746","ssdeep":"384:dpb2dXv2bpe72o/j8GzvBO+EYETJNJufEcGUY311UzrS0vi2ZkdmdlUSdObs0kzv:d6fbao/j5zc+E7JN2E7HbUzrSCZkdmbf","tlshash":"dfb2e03754574147ed202c6cae293c02b78e956e7f916f3ced3d6392380628964d8683","first_seen":"2025-06-09T21:44:41.503405Z","last_seen":"2026-06-08T11:46:51.654921Z","times_seen":129,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/WPSCORE_getDownloadSetting?domain=89444794.com","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/WPSCORE_getDownloadSetting?domain=89444794.com HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: fqvkxyz732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4ZRCmSnMLKsgq%2F422McOFnLC9XAa84gvi6If5SBZwpWqe3oQok4fo3OgfJhQ1QL4pgCMn5ANhdqU66%2FJocFVdB8I9NJ76dIdhda%2FsqNBis%3D\"}]}\r\ncf-ray: 9dc3d2467a792382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3943,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e64883925ae6494190b970fb5da390ce","sha1":"34df1ad65710fa725acca5daaea5f056dcccc8d5","sha256":"514686794e7535193f1316c7d7ac8527324a882b16a121662c701e5edc02cfd3","sha512":"aa0ff8417b5ab6b4e2f59b829fe8f6a0852dadc8b4cae947616551eac8e7903202593965b2b83da97f6fad156ff4e955a1bd3e80697797948011a5e7e18499be","ssdeep":"","tlshash":"dc81686f2d016ab30dc6d04da26d7e53311ccd7b10a2a8664839d2bd7ebbc7903138a7","first_seen":"2026-03-14T14:04:22.037558Z","last_seen":"2026-03-18T22:43:16.621886Z","times_seen":3,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.ftjzjtqz.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/5.ftjzjtqz.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzO1vGG8V8aQvU6Z9k6BrRZsD_CcF0RSBfmiN8sBCPODvFJsQLYczbkx5zDcgWsPfF4\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\nx-goog-generation: 1773396432433607\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 218582\r\nx-goog-hash: crc32c=deI3uQ==, md5=eobqeb3tVDk5Hkrz8UdFNA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 67348\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":218582,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36682)","md5":"7a86ea79bded5439391e4af3f1474534","sha1":"4d5f7facd331622d5c7eef74085747d8efa7cc70","sha256":"d4e77b841361d7c588767ea1cdc2ced81aed1cc8fc3ad01db3a99fc233d22eb5","sha512":"003414a3ba1c6950b24932ae464b26dc99a3d3bf07ad5de8160cdd1436f58b723758c943a50ef9311dbac61e836c621c8522793294eed296b37af884c0402d10","ssdeep":"6144:rnzu1KAnrxwpytI5OcfpKu35oy7qI9vcZjZf:bzu1KAn+pytI5OQKu35oy7qI9vcZVf","tlshash":"39246cc4f18af53987eb34e6547e2002f63d6d18784c8460f758ddb63da858a9273f2a","first_seen":"2026-03-13T10:18:05.352832Z","last_seen":"2026-03-17T23:41:17.95608Z","times_seen":136,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/html2canvas/1.4.1/html2canvas.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/html2canvas/1.4.1/html2canvas.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 37629\r\ncf-ray: 9dc3d24afab75ebd-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61ec4640-92fd\"\r\nlast-modified: Sat, 22 Jan 2022 18:00:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 131737\r\nexpires: Thu, 04 Mar 2027 14:03:22 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qha46ruRebnbSj3mtOnSpZw%2FsRVD%2BarPEiRThAheNMbXxjXa6O2kzj1zyQKzjXgKIlb3e2iCQEwSvbT5fWAHegLu7u%2Ba3TSGh%2BewJDDjYV5w5Jt6VoNhewLRgCRHycJy7KgAJOhH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198689,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64372)","md5":"d7530aa0b7587e627484c49fdf8f13f2","sha1":"b987dc0cc6cfcdc2e34499375f505470c5adb891","sha256":"e87e550794322e574a1fda0c1549a3c70dae5a93d9113417a429016838eab8cb","sha512":"04d6914276096223d2a871c36f9f01d3268f7c2bbe5a076cf06a7f814df792a06d80d4b8b523c7b8689bca87aa315fd326548a75ae855f3a04c981a34defaf5c","ssdeep":"1536:dLkw5M8eKEsqi5xpg+n1sPMecC9JmgxBQSFkkZQRlNM7IgeXzh:dLUtZSpg+aZmabZQz9","tlshash":"121457b46ba71cde0a7ef49b00172d838d981b67117fd1e8f24aada62d70702ceb1574","first_seen":"2023-03-08T20:20:59Z","last_seen":"2026-06-08T16:54:06.634252Z","times_seen":6139,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/lotto/lott-common/lottTranslator.1cbdfa03.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /lotto/lott-common/lottTranslator.1cbdfa03.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 22 Jan 2026 08:57:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6971e68f-12a283\"\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 13:31:28 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 1915\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ty5dEZl%2Fux06mjZHZepZ1zKj6BsrYJFiudzj347uPRvTk1rge9PddeRkyIh3QpeTsmzX03%2F24Xd285UHGw%2FkX1F6WY5i7oH%2BiKmcxDSMu%2BA%3D\"}]}\r\ncf-ray: 9dc3d24f8e522382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1221251,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50218), with no line terminators","md5":"b83901ef304c990d8ac5536d79c6d09a","sha1":"c22ab73bb301e543141ce2bed53380cb71b8db43","sha256":"bb79abf5ddc6d85cfc8321c2acf5e92db2629f2b2eb5d437ce0b07a1f5ec6d99","sha512":"5cf2d7dd44eb1633903a41d11c6807bb92197da2343bcd7f4659753b65a10daff14108b5343b7b838c320617888c343fdda03a10f0479e9a60acd97f54fab441","ssdeep":"12288:InuYcCSbrSPZkSGC7fJCTbPGyxwdIu6JiT22+ki6zx7ok1n9RY:xHbrC7UUIu6JU2Iic2enTY","tlshash":"69453bbe93a62aec0d5db65b4e9b30a1153d0548acf437c2cdac1e1877ccd1da072a67","first_seen":"2026-01-02T05:36:01.895852Z","last_seen":"2026-04-08T06:26:50.02431Z","times_seen":476,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/WPSCORE_getCustomerServiceScript?","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:20.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/WPSCORE_getCustomerServiceScript? HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:20 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: jsxh0c8732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7VuWRPUQO%2FHnL2%2FDYmEFFPUHA%2Bv3qcK%2Bzgm6tyRrZQV3r5nU%2FYznzNyPqTzqx7i%2BKVnKnry681Czf9BVzfqOuSgMmhc7yF3Qzo4FL6K7J1c%3D\"}]}\r\ncf-ray: 9dc3d23e883b2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1243,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"509b303d9c8bb45b2f9672a5fe47a019","sha1":"7324b9a3b741f575582d9e85143f910d5d9af7f8","sha256":"6e3f179a0b0ee0b3bd3c85043c04bbb2d392ed7ee527895a17751eef21fa5889","sha512":"4be4e60af4f2a64a709d880549daf2d2449a1f09759f2e0d2e70b4ef7bcc2c23794ce11485026bc3abef34eae3ec477ed660ad24e8cc2fc124384e6e018c6406","ssdeep":"","tlshash":"0a21e0baec40a0358b963a16373ffb0b5166551c4c44907379dac77edb21ae78113584","first_seen":"2025-07-01T02:11:35.301464Z","last_seen":"2026-04-26T14:39:03.185867Z","times_seen":11,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay//PROMOFE_getPromoCodeEnable?","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay//PROMOFE_getPromoCodeEnable? HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: application/json\r\ncontent-length: 41\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-app-trace-id: izcg5ud732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: REWCEN3\r\nx-elapsed-time: 1\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FiCgpHncF%2Fu8iTiCM7w7CjIv0AlEdYbl%2FiwFMiMyGl3DCqoCjrV83fmv7WFBhgHMdv%2Bl%2FDSDnfMJVvsrtSXtgaKSk9hy6WyDDJ50pYBcOXU%3D\"}]}\r\ncf-ray: 9dc3d2442d4c2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3961e890485c56051ce3bef421524dbb","sha1":"da0ecebe6a74fbcca1e5cce6da3dd423ab9e7e46","sha256":"397614303f0605e6c81dbcbf35187a0e5f2f376363188d8bc71985b69be0ff35","sha512":"52868cca07cf02c3b898ae6f3888440df7f1d664deef0bca5e7ee488d44283f6964a72e85cc6db6600d6772eb71f4f91d6194cb08fb93c13df5bab932f703119","ssdeep":"","tlshash":"8d900201141014a69002520015385b00346804565112a0599148806869e29051243846","first_seen":"2025-08-10T12:55:52.39708Z","last_seen":"2026-06-08T14:29:32.907248Z","times_seen":856,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.DlE2yADS.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/1.DlE2yADS.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzE5WYNxAOiIW5WTI3e4IssqGCyu40tDF6ZVoGPJMMnOUI5_iCvM0bRlBXBbdKaOWyiqTd6gME\r\nx-goog-generation: 1773396432323476\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 55250\r\nx-goog-hash: crc32c=0ILqtA==, md5=4sbGciy2aTqU06j6gT0+lA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\ncontent-length: 19958\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":55250,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37825)","md5":"e2c6c6722cb6693a94d3a8fa813d3e94","sha1":"10b0d5d01ca1303442dd95e58b4527e773f9a64f","sha256":"d2243dc8da94e60651227070409fd3f7a458fb8d1ccd07dad0fd1c57453269c9","sha512":"7309f6664ccb0f2fa432cd42796882cc9fa58837340b331b500d5aca80bba3e0a27485df98035ba5a14a03bbe8ee3c6c680c3b9f97cc8698d0140f0190f1a89c","ssdeep":"1536:EhDt5ZV9vjhC4gPVA2JtszSjt1cK3UVnJzu6:iVf7hIq2mSj3cKEVJp","tlshash":"af434ddef24174355be315f2a06f9106b73a2a2c385cc0b0f629dd9925de04ba227f6d","first_seen":"2026-03-13T10:18:05.45549Z","last_seen":"2026-03-17T23:41:17.851791Z","times_seen":136,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jasmine2020.89444794.com/js/aboutMerchant.js?v=18836","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jasmine2020.89444794.com/register","date":"2026-03-14T14:03:19.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /js/aboutMerchant.js?v=18836 HTTP/1.1\r\nHost: jasmine2020.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jasmine2020.89444794.com/register\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-7c0\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 14:00:42 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 156\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w4SlbgUC5%2FUktiiagvN9mQ7coB79i9pZ7s09w%2FN3ZMesiLid19TOzc3t5BD%2BmHfKoP%2F75JkHy%2BchBJ4xX1tABGPNmlzjn0643jbqQbnU77VHTew0ZIQ8dQ%3D%3D\"}]}\r\ncf-ray: 9dc3d2364eb12382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1984,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1890), with no line terminators","md5":"568403915c6cf2c3eecc0a299a35861e","sha1":"bdf3acedc4179c060a0ad0ec73032de39e7c4c0b","sha256":"a1e6867177e1d5a22d21ce39d9af84dfd9464457beb55b923f969f9c66057164","sha512":"4c8bf3dfab872448c88693036e62a98481f8ebc7add84670daab327c3e14142e0a4480d8e251943491346b47a9f88349cc7675c24eefcb85eaa0d858a0e45930","ssdeep":"","tlshash":"d941539eb14bebe205f620822ac56219647360d804b6e4817b569540b47ee4fc25f9cf","first_seen":"2024-12-22T03:03:41.35822Z","last_seen":"2026-06-08T09:43:18.294344Z","times_seen":469,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/v.1.0.1/lib.js?mc_t=shanshan\u0026ac_t=shanshan\u0026version=v.1.0.1\u0026ac_v=1.0.1\u0026mc_v=1.0.1","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:20.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /common/v.1.0.1/lib.js?mc_t=shanshan\u0026ac_t=shanshan\u0026version=v.1.0.1\u0026ac_v=1.0.1\u0026mc_v=1.0.1 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:20 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 05:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7c066-1956\"\r\nexpires: Sat, 14 Mar 2026 16:15:35 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: HIT\r\nage: 78464\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQV60Egt4DWutvjri3N%2BNNUJeLFSwxt78AUv41pL0kbXQ2lLp2bfcz0I7tdUcz7OsjxEQmLv9VplC59EVHeUm9HUr3HWyAdRhp95VtUh9X4%3D\"}]}\r\ncf-ray: 9dc3d23e78232382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6486,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6484), with no line terminators","md5":"3aad2612dfcd43b8dfed1ca072aa5c21","sha1":"d3d97c5ae4454416d627ad3e9c5ed7856085b981","sha256":"8da0cbe25140dff92f08b7d1ecebd3da8c2f47c9d414dba6cc5bdcb4f7006de3","sha512":"206f426ea79f4ae420686a5a40e2ecf9ccabf1b6970a125ddc66ccb65e584c089622163fdc4ef94054734cd0869a2d1090fb66980418de0b23887aa0805d229f","ssdeep":"96:fYr5C14peqd/VyZ2N+dE+sf14D55gBmBEZQRZlgPhanvxiKLKH6aDVAG0:S5C1G/Vy8Id5n7gBmMQ/nJiGWVAp","tlshash":"1dd1504d7525f494a2c7a1a4c27f5c0fad37246e2829c034f5c1e9e2ad78e4d812bf5a","first_seen":"2025-06-14T14:10:40.274801Z","last_seen":"2026-06-08T20:06:57.745396Z","times_seen":1984,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/MCSFE_getMerchantAvailablePromotions?","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/MCSFE_getMerchantAvailablePromotions? HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-app-trace-id: 8i9r2u9732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: REWCEN3\r\nx-elapsed-time: 5\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGCyHAG8Cp%2FzFEIi5ZRmZVAj7tc%2FvGyIwiE%2FedIt9w%2FFYpxyo6f7ywFdRk9RDAxq3SYzF1FX939URzQPEJkOfYO1HVhacSuD%2B3xyLxRHC8M%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9dc3d2442d4d2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"74b845eac3c1e25021b7c0d5d2e38310","sha1":"67e2369c507afab37ee4cd5bcdad06cf7d6fd3f1","sha256":"ce89eb137a878b3b2cc05c6880bac70a58b5f3b2a6265da3dae008bd1b295f41","sha512":"99b532ef374b41d354ef1cd87583b6df0fa3c0687fe46c10cbc7b5f7aeb22d056638fb219c14cc4df3034bf3a12c1b6672d5be5bf19db1597d53eb56dc8b710b","ssdeep":"","tlshash":"c1a01207050020b1c2d1c004d23c3e132065443346033010c20ca11ca93f92903cf867","first_seen":"2025-02-24T05:20:12.77078Z","last_seen":"2026-06-08T14:29:32.712673Z","times_seen":831,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/9.14.0/firebase-auth.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /firebasejs/9.14.0/firebase-auth.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.89444794.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 33722\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:19:22 GMT\r\nexpires: Fri, 12 Mar 2027 15:19:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 168241\r\nlast-modified: Thu, 10 Nov 2022 21:00:29 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117350,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3e80f5800c11d19d455627966a2262f8","sha1":"c66be704649d09d8c567533662f30e8c071bd68f","sha256":"77eb87926cbc4ca21f9da2a1d9290abe1cc08683d401d0e08a7aabd6447b3982","sha512":"386fa224fdbc774a9541c9181b32293a1de7440c1f2516ea43f847c371b0edae019d5b24af80b9a2f0bc1c3e69274b21c30e35a4d346be0ae61caa3e476235e8","ssdeep":"1536:Tt0/Cwwg21Lrb9KhZs4+3WRO/uFnO89uYkXQIv3pW/HM2QFu7F7kE6+qXcw9p+3L:TtqwgMLHNgrFgEmkSCeoh","tlshash":"e5b3098573e7e03286e988ebf0770103e32d5958795d806cb22d9dda3d5b885b637e38","first_seen":"2023-03-12T16:30:31Z","last_seen":"2026-06-08T14:29:32.880587Z","times_seen":2276,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":151,"dns":1,"connect":21,"send":0,"wait":9,"receive":5,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.BGtuIHiN.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/0.BGtuIHiN.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzoM9lHj5VMBO7eYDRL7DpbcV_Sm2tvAOFRgsH2RrGNUoC0A3qcAaZNW85wROMXYR6CcYSI-VE\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\nx-goog-generation: 1773396432328868\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 78476\r\nx-goog-hash: crc32c=2iWLkQ==, md5=uvnsO5vQlF6b8QQn4UvqTg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 24329\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":78476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"baf9ec3b9bd0945e9bf10427e14bea4e","sha1":"e16e855035b39d06eb58409fa61483afdd0915f0","sha256":"7f17ed0bd0bfc9fc8034664b75f06d7a735d67cbb04b5c4a459baa4092106dc7","sha512":"d103a3ec9947b2cd24196076df4a1e7d8825273b37a88bce600fbd6491396e72616279dc276f1430960a01141d93572d9656a27555b563292d63235a419e7bf8","ssdeep":"1536:UXwfFcel429rLRevECR/fjtDSdDlbM3EvrlxbkZT3BV:UXwBlprLwntG/hvjbkZ3BV","tlshash":"9b73e9e1f296f5399bd3a8e556295103fa363a18785cc270f31cce14219e1c2a1b7f6b","first_seen":"2026-03-13T10:18:05.453904Z","last_seen":"2026-03-17T23:41:17.862024Z","times_seen":134,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.C_rgEAoe.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/4.C_rgEAoe.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzXUdLoluxHPbv4UNnMzcHEAEHkTsOO9yueJxazNjuKY2mtv80cclga7-F7SUCMDpdG_9CP-7A\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\netag: \"1771376dc07da48b3f03339d86d57b7b\"\r\nx-goog-generation: 1773396432375455\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 193\r\nx-goog-hash: crc32c=C03sAA==, md5=F3E3bcB9pIs/AzOdhtV7ew==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-length: 193\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"1771376dc07da48b3f03339d86d57b7b","sha1":"a5861ebfff23a92ccd1ce6b8a517b6f877d50a63","sha256":"6e148df31d721a0ff08563f2d676751786e01418c86ee54ee8f0e88aa46ae26a","sha512":"6038efed0774fd61c7bf6558d3ea24ccebfada1041fa2c1606263a19f8700043a18f6e368ed550fc61f644eb7b81f8cac01498f30cc56a103295911b28e436b0","ssdeep":"","tlshash":"afc022563060f3a502bb0ed00033e02af32a402cf0ebfa80a65cc4f020630530a26b1b","first_seen":"2024-06-24T12:34:02Z","last_seen":"2026-04-09T10:49:40.045057Z","times_seen":23532,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.al-9NYxR.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/10.al-9NYxR.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWx9qdoDGqsDkALDHap-R-47aAvdg3eZb2DZ9tCczMUpuOkrR0gpN33hSP7v9MwrqB09jvQ69w8\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\netag: \"4a073c5805819d74eabd3e843372d502\"\r\nx-goog-generation: 1773396432311545\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 236\r\nx-goog-hash: crc32c=6eM7Vg==, md5=Sgc8WAWBnXTqvT6EM3LVAg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-length: 236\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":236,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4a073c5805819d74eabd3e843372d502","sha1":"cb12e953dbee2d3ea08d35d86bcd2476a490bda9","sha256":"0cb3247cac5de8fcdfb226ebe2dc4960b6ed473966359f73ca13ca286309122b","sha512":"036da8fb3959ebbef26b546019535a9edb7a99227a28252878247a756d3a7ea693f48e9ffdaf5886faa7fb2cbe56292bbf9552db5dd1d26e6574d8034ee183ba","ssdeep":"","tlshash":"ebd0a78cb643b0b16276b138853f801fb035e984a44404f0d13ad9c03d7c1a97597c5d","first_seen":"2025-11-04T08:39:27.95245Z","last_seen":"2026-06-08T08:31:34.943813Z","times_seen":16281,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@antv/g2@4.2.3/dist/g2.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@antv/g2@4.2.3/dist/g2.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 214841\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.2.3\r\nx-jsd-version-type: version\r\netag: W/\"d82c5-eSJeFdMsBDXE0ShH9a6Jvs4xKt0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\nage: 4282264\r\nx-served-by: cache-fra-eddf8230181-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":885445,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35280)","md5":"38ac8e4d3bdf9e4d4590f90f572b57ea","sha1":"79225e15d32c0435c4d12847f5ae89bece312add","sha256":"2cea25f3456374b0b3c31f35c6d9b78e638bc26710e8373d9a383ce703c88d4e","sha512":"dcbcdba45f623d55bc6dbb213b120645598396ffb7da40672d32ebed498b6b16788d2e999783e8b27e76c59d18b39ed5d3f4c69fb312b68ae54e4ab48ef10211","ssdeep":"12288:mLSlPBQyGSFzPOMKwnYgNsJsD7AzcFe4zqWf:m2a3IFfX","tlshash":"d215d9a8719078b1829361e8043f050af23ba86d604f65e9f7a5d9f3ac7d84f1076f76","first_seen":"2023-03-07T12:04:53Z","last_seen":"2026-06-08T14:29:32.963466Z","times_seen":2316,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jasmine2020.89444794.com/register","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T14:03:19.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /register HTTP/1.1\r\nHost: jasmine2020.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jasmine2020.89444794.com/register.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-58e\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6HbRWbzCkMskN8F%2Fg3eMDR17kx6MjK47U0Xz2BX8hq7zRM85qI%2FDxNIR5Urx780ORVNdqPnDlL%2FzSLMxMwoSlftiC%2BNLieGoiWa1CStu7e3rKEIYgAA2g%3D%3D\"}]}\r\ncf-ray: 9dc3d234cbac2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1422,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1422), with no line terminators","md5":"a23bd89f6a1c60163d64686b010d0774","sha1":"ce7384a733cf94f6c20d5fe8fe25404b22e84dbc","sha256":"16d1b850e5c592bdf5bc074fa00fe73b52cec410dab356f2f390b4ab7b7a99a3","sha512":"79110096096f7f3447dfcc3d4aae3fd445e31821c95d35ae344a9ad2f6e19c851b27d5127fc22ff6ccb6abdcfe39c4a1eb1692143504a5b98c5a25e733be91f3","ssdeep":"","tlshash":"9521dfe39d0585cd26106a96fcb4f60fcc4f491f8fa0d991b5e9826e84d4bc84406e08","first_seen":"2026-03-14T14:04:22.012464Z","last_seen":"2026-03-14T14:06:08.219125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jasmine2020.89444794.com/js/index.fd066575.js","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jasmine2020.89444794.com/register","date":"2026-03-14T14:03:19.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /js/index.fd066575.js HTTP/1.1\r\nHost: jasmine2020.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jasmine2020.89444794.com/register\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/v.1.0.1/manifest/animate4.min.acc54486.css","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /common/v.1.0.1/manifest/animate4.min.acc54486.css HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 05:17:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a7c066-11847\"\r\nexpires: Sat, 14 Mar 2026 16:15:36 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78464\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9tMTAQyelS7NehBQoDkaEUzA8twjAtvcVwAdDcSEBoQKf2smeNtuU6IAYN%2F9TFJJg8uXEyhQvSHVVHgDHzwB7fJ5MydGS67t54jFH5Apko%3D\"}]}\r\ncf-ray: 9dc3d2445dcc2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71751,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65348)","md5":"acc544860202ca85bd85dc0429880450","sha1":"ab2e786b8f411e124e9fbcbc02f323269beff034","sha256":"721fd25fad2ceea766b483f7692fc840097de75bb54185273920adf62da63e15","sha512":"c1622f9f6e9a38f6e7dd2b5ff0fb6a188f432d8f2d9670b98f7c842190fb3b7faa29b54f66e87ff15c7b741d7c65f52deda428d8bfc76d9027c4cedaf1b16655","ssdeep":"1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTy:AkZgwh1nAukdDO3Xyr5Ir5eh0dTy","tlshash":"3a6329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-06T01:49:24Z","last_seen":"2026-06-08T19:17:08.108506Z","times_seen":2642,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/numberSeparator.598de917.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/numberSeparator.598de917.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 02:36:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b226c1-1bf6\"\r\nexpires: Sat, 14 Mar 2026 16:15:40 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78462\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8FE9RxO%2FDXaiNWCo9TryK6o%2B%2BVgQIDgNgfA41ZIpxTXd6NWRS1Atyp0epZNA%2BqbB80VWQLkrG%2Bdlmd3Dj0%2FpA%2FsOpzb2sRBL6Ugt7Ja2zlM%3D\"}]}\r\ncf-ray: 9dc3d24adc922382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"598de917c7a1390e1b4cc5e65be75eb6","sha1":"8de5f9ebfa6b92d1b42d0086066ba653e094f3dd","sha256":"bdc44edeb986790b38c4c64ee36e5e1fa7b39ffaf89e4e4799f4f315da9a0a0a","sha512":"9895abf61392894b5b8746a0e145a578898c55081c8f3242223986500813fde1aca1f574f01d5dface7710cab4382a132cd861bd99a9b21d2a734933c375a391","ssdeep":"96:GIOVuXQTvvHfyiwCJd+SYgyquFWqSqyEcdpy5FMRSrbEonLmmOKVrxYSEB0:GIOcXYF1JJYTqGCqyZy5FtHEoBtYp0","tlshash":"afe1cd5972e720728a3f30aa5bdf80016531255bb088d9897b1ccf44af52c79c793abe","first_seen":"2025-11-06T02:56:03.081794Z","last_seen":"2026-04-14T00:24:02.229707Z","times_seen":832,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/promo-ui/assets/chunk/GIFT.Pam_fORI.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /common/promo-ui/assets/chunk/GIFT.Pam_fORI.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/common/promo-ui/assets/entry/main.ulP8dcsq.js\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 04:20:19 GMT\r\nx-content-type-options: nosniff\r\nexpires: Sun, 15 Mar 2026 14:03:23 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tNVMjfbBstUu4CGe%2BXW7ZBEx2uKjxN2NwjXROlj%2Bkq%2B%2Bjd4I8TYxyAVf1TMgY69SXyXWI5Y8xj3brGuBMdO6CdGVR4c9Qte1%2BFESubG94dE%3D\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\netag: W/\"69a7b303-5c\"\r\ncontent-encoding: br\r\ncf-ray: 9dc3d24d090d2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"6851acd306cf3dbdc40823c829d6199d","sha1":"d2925c8057e00ba1f0d23ee1b18ac0643d5711cc","sha256":"a9c33ca4ecded6e675ff76be1503ad875b9d74a750108e452f2aaee368a5ad3e","sha512":"a34c07a5f3a260523b7f7b4447a810fe69f7ac6ea820a1f428c6c4597d6ece419cc1d67b91238de5ed028b4955212911dd656c3ae4cc43721a1076880be3ba75","ssdeep":"","tlshash":"b0b0120714a5ca18482271c401789657b2094b10743515544048454237a3d2400409b0","first_seen":"2024-07-11T14:40:28Z","last_seen":"2026-06-08T14:29:32.904713Z","times_seen":2189,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/MCSFE_getAvailablePromotions?_=1773497002745","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/MCSFE_getAvailablePromotions?_=1773497002745 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-length: 126\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-module-id: REWCEN3, REWARDPROMO3\r\nx-robots-tag: noindex,nofollow\r\nx-app-trace-id: m43qh03732\r\nx-error-code: not_exists_user\r\nx-elapsed-time: 4\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7KpwmiFaQpSmJVqTnLpyAFFs9cGLurWTCGAGJdYTJmSunnPjfw6A%2Bvrp113s2SvJuO%2FXAq%2FRjBGjXGaCx01RyodSKdpnfsFIZ0V9kWey%2BSE%3D\"}]}\r\ncf-ray: 9dc3d24d09162382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"11b91225dd09d914ad14c0010fcf0af7","sha1":"288df8e3e7807b95f844753fa2f838c49567ccef","sha256":"c49b1f467e882c427300ef6249f0da15564df68494010d43720ed758497c3686","sha512":"b9e919e693fbc6fe39dfdedc145a7039ade66a56645e6c641b40b5ab555a2cb885824ec809f759c3852d93ae3faeafec151fde67668d226a47b54b62a6ba80e0","ssdeep":"","tlshash":"bdb09b0d414f155a9941554d55150a5172f19161a35461094538417d57896451893304","first_seen":"2026-03-14T14:04:22.048433Z","last_seen":"2026-03-14T14:04:22.048433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/lotto/lott-common/bettingCompress.ee38aabb.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /lotto/lott-common/bettingCompress.ee38aabb.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 22 Jan 2026 08:57:51 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 13:31:28 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2839FhgwZqt246TyoFn34DmALrTjMZNmtfDCfHtf%2Flv7c%2BpkwOkEj2U%2BOHZAV8WcRD7Vhn%2FKx5bt5SvzXEvUBjYz6fJUgvX2zscMX8bQWMs%3D\"}]}\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\netag: W/\"6971e68f-35f\"\r\ncontent-encoding: br\r\ncf-ray: 9dc3d24f8e5b2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (863), with no line terminators","md5":"0e9473155c92891f4386dd0d8069e9f4","sha1":"9267afe6b0d97cf53172044ae9a42265d9a3d363","sha256":"a0e031682a12d70795625a3dc3b2ef78cb8e1df947e2624b6af6e4c29f51ee1c","sha512":"fca9d9ce963c1d918968709e1d4cde135d229c86f061ebf6424e7795b0f82a387090afec4e53a14f6b08b4b818bccaade875977c4b9240694221c067b5ed9624","ssdeep":"","tlshash":"e611ab5930c1699a12a2f568c90fb31e54664e2012cae018ca1ed88cbe755fa85a2da8","first_seen":"2025-02-23T00:29:24.577675Z","last_seen":"2026-04-08T06:26:49.892621Z","times_seen":2022,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/mc-properties.e4564dbe.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/mc-properties.e4564dbe.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 02:36:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b226c1-2d4e13\"\r\nexpires: Sun, 15 Mar 2026 08:10:38 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: HIT\r\nage: 21164\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vbGh%2B290xAjZHrfN14BTbgZHVCjldiiu8asENER1fNqVZp34v2mOy0Uu5iOiGZxVnR%2FF2Vn%2Fd0HN2ct4S2pm6%2FckgWNJl6qQ9h0UJzX0G80%3D\"}]}\r\ncf-ray: 9dc3d24adc8b2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2969107,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53936), with no line terminators","md5":"73061b7f6b31658756e36d844a6717f8","sha1":"73847411971b0e50c32c062bf2336d0656ac4bdd","sha256":"3c3d087ba923ccbeaa476de358da1bf2344f712b7478b41a31876c697ca79b73","sha512":"22e5ab145052d0f9c1ceb01c9ffc6b31209430b0767c07084c5bdb66480cbf1cbd92aad4c169053bf9996670874187975ff59b3af17cc564485e864c8a5f4a77","ssdeep":"12288:z6/sPs7w0NpmKEBq4aFWACWugbgBWMCfX6hCwBCz+bWyP8Qyam7z2JG+X/IMS1lT:z68R0FWACTC","tlshash":"4665f8580e5faab184eeb643708e393080a97e23e775d5c1de6d4eec09c8d7c8246776","first_seen":"2026-03-13T11:40:16.303504Z","last_seen":"2026-03-16T02:47:17.882619Z","times_seen":8,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/system/country?","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/system/country? HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: 4ttbks0732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 1\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VcWQ00qLhwbn2A6eqpEyChDxOlZzgnXL3NYLkEJBKgbqCE1QgperQUkymbsUQ%2F9PLz6PiXj3VllRclD6C%2F72K5oZGAjzKsOqlw%2F12usCC5M%3D\"}]}\r\ncf-ray: 9dc3d2472c2a2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14454,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (13443), with no line terminators","md5":"fcb4544ecc8a9eb112c4da6639c2925c","sha1":"99f0e0948a517f8dd0220fe371b095f153fc2b74","sha256":"0587aa2b6b8f2239ab9a458e5bf41ebd3ecc12770cd00b2dea2b012b795e9dc5","sha512":"d845e6e2a95f66656b67f4d286b0f6010811b0b1ff561d146012622f272d34dadd16faaa3a6360688963e535fb5e539a8a0e06a772f0d423ca8073e0a68f9e3e","ssdeep":"96:xjOZwkPVnUSDUx5hxFDHxk5ViPDFthda8fTL6lkD+kavc/o9Md2aWPaCKxm5OGek:/YNgSHwxwwV51RmS/Zvm","tlshash":"d8526a3e640ddfaefd76ffd9b04f362554362944d2b8240acac05b727b95afd21210a8","first_seen":"2026-02-10T11:14:14.831101Z","last_seen":"2026-03-16T01:41:39.85424Z","times_seen":57,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/lotto/lott-common/lott-js.js?_=1773497002017","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /lotto/lott-common/lott-js.js?_=1773497002017 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 22 Jan 2026 08:57:51 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 14:03:22 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BSDGLZqNtV2Ofj%2Fne8WH8%2FBER2v3IJbIO8ZO0qeR5pjkazFp4IblwluXW6ivo4SZHpKG17VDyRG5BSjTMURWzCIqT8DnrMg7zKenldQw9zE%3D\"}]}\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\netag: W/\"6971e68f-23e\"\r\ncontent-encoding: br\r\ncf-ray: 9dc3d247ad752382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (574), with no line terminators","md5":"e875089e8a66f5018932c48c02988533","sha1":"5a6e8b12c9e9d9318f187c64b40918be05fca960","sha256":"71379ef2741e26a506b970bc43e8b80f72229e93047f7967b755c675217de66f","sha512":"6697d1646318316d9365a3e201520d397fd605ad9f084583534127a86be2708a8dda0722b13249be96584b47ad2160020ac7e47e3f2fd111966ca2a1c8ef974d","ssdeep":"","tlshash":"f4f0c22c2ea0f93a805f3c57767ef24832a21519a011e00168cfe81c6567edf8eb9a84","first_seen":"2026-02-02T08:43:50.183545Z","last_seen":"2026-04-08T06:26:49.909742Z","times_seen":299,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/qrious@4.0.2/+esm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/qrious@4.0.2/+esm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.89444794.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6640\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.0.2\r\nx-jsd-version-type: version\r\netag: W/\"459c-FGDl5OysMllgYz55EYyWgp8d+F0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\nage: 2605306\r\nx-served-by: cache-fra-eddf8230052-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17820,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17476)","md5":"3f0602cee23a7b0377062a1a341d01b1","sha1":"1460e5e4ecac325960633e79118c96829f1df85d","sha256":"8478c77637d268ea9f88e1aae84dacd031256fb67063a8d94d222cd3eff8f84c","sha512":"7c1c6533f0e924a56239bb1395f6d4fd26cb9e718e355fc5448008da6fa6ca980d9a57e6d427e71e751cb66120dcfe5af1ce80d6b093d5336ab82ea63c0b9dec","ssdeep":"192:NMSJOPXg7hZv1fpYoE8GS9GLhgbHcj/13BBenIhG8+f3/pSq3c/WJBS7SEzonxKl:eSJOPX6wl8GfYUfhpfwcqEhwdlmRvki","tlshash":"a182859673a19269639669d5083f244f82f6e4193418429cfbb2c9dfbd3c4c96039f3a","first_seen":"2025-04-04T11:34:30.82088Z","last_seen":"2026-06-08T14:29:32.819612Z","times_seen":1997,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/lgw/games/game_menus?prizeMode=SEA","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /lgw/games/game_menus?prizeMode=SEA HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgP9ClBcGKqECpTAqUcOdM48xAr7ujGE3WzJb0st%2BmvE0MjZd%2BgvwZNk8kgfABRP4Wcu50s7zjaHkl%2FoU3xtfgqtWg2rdinb1H1xku%2BIK%2Fo%3D\"}]}\r\ncf-ray: 9dc3d2466a6a2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6621,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"aa3dfbf6cb374741b35ea1f9c16fe783","sha1":"369cf091758ed3888101a5bca40d0262507b2c30","sha256":"f09e2c6f0f3c77b1dda5a3dc660c25d442211626f17d96928d9b515f331876d5","sha512":"d92cc275868f3aa3f1a3cb9617c486f1d25918bad2398e54acbb0b54ca074ab72a40e4a085cbc49429061824d23c10450a84525838314084f1106724c603dbec","ssdeep":"96:H8SKc/LFZPyYFcpNd23rvu6dm5QrfNL7zaGj8HwVL2:cSKcJZPy8cpr23zu6Q5QLNL/aGj8QVL2","tlshash":"82d1211e054918b4dae020e011ceff86c5ac23fb5ac0aeda605fdf580ed63973567257","first_seen":"2026-03-14T14:04:22.051258Z","last_seen":"2026-03-14T14:04:22.051258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jasmine2020.89444794.com/register.html","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T14:03:18.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /register.html HTTP/1.1\r\nHost: jasmine2020.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:18 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XAv%2FHEFUtK3Zk0iQ1q4VdCoPAc%2BQvuzCyQcVdxB19eBg2ssbZKHLRbkdasxKWuaDrKieQuzlxctnj4Ja7UzRtZ898m%2F1d8eNrJd%2BorRk0QWqg1ILUvWBww%3D%3D\"}]}\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\netag: W/\"69a952cc-35b\"\r\ncontent-encoding: br\r\ncf-ray: 9dc3d230fab12382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (856)","md5":"6adaab38b585a6a80932c64060058bce","sha1":"8bca4dcd0357b923ee87ab6e663ad2b4ffd31bf7","sha256":"f156cb02f8a30b2be0c29bc0796ea47788724d16c3daa3992e29b2c14a49523a","sha512":"7bbbae8bba3de6c90445518b925a57b94eb9302c4056f0731cf82bf72a5897bea9dfa8da52b56d1e64ebea818e7721d0daae1e27216c41dd71d4a4e707e2ffda","ssdeep":"","tlshash":"8311168dc2d6c35515b9250189c7732c2277c4b01827d440b9929244e6f536fc90fddd","first_seen":"2026-03-14T14:04:22.051974Z","last_seen":"2026-03-14T14:04:22.051974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":60,"dns":30,"connect":8,"send":0,"wait":404,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/img/login-bg.6e282518.png","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /img/login-bg.6e282518.png HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/css/index.570c9ba0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 4156793\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\netag: \"69a952cc-3f6d79\"\r\nserver: cloudflare\r\nexpires: Sat, 14 Mar 2026 23:37:45 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\naccept-ranges: bytes\r\nage: 51935\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ygbm83PM73SDP91dAFeskna5dSTIpr%2FcokfNPIFTlJIoEuCowdoy7jDlYS7Iznj7XLcUNNZNu68ffnlY13%2BcBVfWbS%2F0QIjEWhXw0QFXMp4%3D\"}]}\r\ncf-ray: 9dc3d2432a712382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4156793,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 2736, 8-bit colormap, non-interlaced","md5":"0eb369868800d5cd427cab17bda61dfa","sha1":"57f8557db7d3bb89f39aa84c977b8fb470ac81cf","sha256":"592c0c0665cf2d03205d8e3ac95619cc906c726efe44f3d6a9738d6868a28690","sha512":"0c170d5b4fb3a69281c8276649dd1dada979537ced55fe04f479f155b24b6b8053bc08f66d2c145dc891067fcbb34bb61cd884c4663c77888c17e9551bc966e9","ssdeep":"24576:j4MGWC1ziZa4lR++QvgVQ7xUg0MXY9ooittZiE03:j4MGWrZ8pY+7xU/MXYut43","tlshash":"6c25339234d54204a8705edd2b93fe2611bc0d989f8551e3a3ac4d8cb7ed7fa2ae1c94","first_seen":"2026-03-14T14:04:22.052805Z","last_seen":"2026-03-14T14:04:22.052805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":365,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/WPSCORE_checkIfAppDomain?rootDomain=89444794.com","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/WPSCORE_checkIfAppDomain?rootDomain=89444794.com HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nMerchant: elitlbs2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\ncontent-length: 30\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-app-trace-id: qpbscfz732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 1\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eL2a3IBLZE56yK53ptMxseL%2Fqa5Ge9zyyDWouj%2Bp2fkg1He2ceUqIIOjE2yZ1nMmbLrXwW3VsnWcA0MLj2nujJ2GOZgayMIyRNizY1xAouc%3D\"}]}\r\ncf-ray: 9dc3d247ad622382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3e87820a66f1829249ddd1a29f83c331","sha1":"d286adff496089234f911f647d33594b6c04da46","sha256":"6b73520ba2d5379eb9e88ea386fb92e3ac95f622eb8b719b39632bb5fafc2120","sha512":"5275dfc6d5eec79fdcd7054104224e2747bdfbe451b1779e063fdc104319f316c1d3e0e9e0aa3e979839b5339579b40ea7a60998bb557d9d89169c3e9db614b6","ssdeep":"","tlshash":"5b800002200008fbc00223002a382f0038ac00aba000a088e00c8088bea2802208388b","first_seen":"2025-08-21T08:43:15.406553Z","last_seen":"2026-06-08T14:29:32.862722Z","times_seen":1554,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/index.js?_=1773497000710","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /mc/v.1.0.1/index.js?_=1773497000710 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 02:36:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b226c1-333f\"\r\nexpires: Sat, 14 Mar 2026 22:03:22 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: max-age=7200\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKa7HwvvQUuep2ZxXKAy0uUwKvaW%2BrTlfP6%2BlDo87Jk4uGxjG6j7aSCsnB8CxnqA%2Fi2pn0CekerRpBE8g8wBzz7ezZLDenFf1pdfy4HizbQ%3D\"}]}\r\ncf-ray: 9dc3d247bd802382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13119,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13118)","md5":"e9818e0c748f5a2b524bd748ef7cb298","sha1":"7bf70fd97a4cdbcca6bdf5aaca5c860d4752d8da","sha256":"87998697a35f3af73c2b35074868490b82313ebaa58a4a45e6a5bfd8049e171f","sha512":"a2b32f6d291542ba1b127ffbc43ff1246941f65077df6379f1149143666904b3da7554d7cccbfe7078772f9508b4dc714731b413e24af0a70ced90812ccb175c","ssdeep":"384:ZbhhNKg5/885YHtkLhm4yNHFeFWipjrQ8WFaLjLsu5HNaFrsrwZ7BAhqZs7WudXX:Tlo+lSjWkPjqF","tlshash":"ff427d171c1e842c168de9bda8654e4c6fef8eb25fc51e2db2ac897c052d90f49d93c8","first_seen":"2026-03-13T11:40:16.236325Z","last_seen":"2026-03-18T06:53:02.364522Z","times_seen":24,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/slider.d420e4d3.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/slider.d420e4d3.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 02:36:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b226c1-7e10\"\r\nexpires: Sat, 14 Mar 2026 16:15:40 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78462\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxJnW6n%2FritJRytzqUd8Icl5ijHMNA0YaNrGRPwkOQ8LastpiYKWIWFRkk2GDFY33OK%2BjmYVssiwobxlAdilnHGdBQn0aLZePTog%2BIv%2FMic%3D\"}]}\r\ncf-ray: 9dc3d24adc872382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32272,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d420e4d388935ca74419f5edf6a4b3a8","sha1":"bacc1d0c5ab9314441b2cdf2943a292e4e579398","sha256":"7062323b9c3f6fbc07887ff7baaedb379d6836e7bfe70d7747025729598ab49f","sha512":"1669328f8a562f8be4195a3f484b2167f031d539fd07ae2d8566844e8d49f414438f0307dfb992f0286cbf2beda3fca20b11f5dacd8fe65b6bb96c064c4985df","ssdeep":"768:gXE3sT/57tbDWuZMiRPidEB5Sn55+3WjFQSjWDNGL:gUqWiV5Bm8NC","tlshash":"86e21f0a6bea6570a513b0aa5f5f984a7634419f8d06ed887d5c86c44f0dc3c92f2ff8","first_seen":"2023-03-07T12:04:53Z","last_seen":"2026-06-08T14:29:32.678691Z","times_seen":2303,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/check_goals?organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026x-region=us-south1","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:23.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"OPTIONS /v3.6/customer/action/check_goals?organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026x-region=us-south1 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://secure.livechatinc.com/\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: AkamaiGHost\r\nmime-version: 1.0\r\ncontent-length: 0\r\naccess-control-allow-origin: https://secure.livechatinc.com\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH\r\naccess-control-allow-headers: authorization, content-type\r\naccess-control-max-age: 3600\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/common/promo-ui/assets/resource/CASH_VOUCHER.de07402c.gif","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /common/promo-ui/assets/resource/CASH_VOUCHER.de07402c.gif HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 480199\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 04 Mar 2026 04:20:19 GMT\r\netag: \"69a7b303-753c7\"\r\nexpires: Sun, 15 Mar 2026 09:10:48 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\naccept-ranges: bytes\r\nage: 17555\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEmtLBT8nhg3B4Ke5J7V%2BBL8HUcGJ0vCpFzA6JrV2iERVeKbtOzWoda7bFPS1QHmG0X7xZVz98V6CgebNuvk6OdquYsKrQmHnYafuD9SnLg%3D\"}]}\r\ncf-ray: 9dc3d2517ba22382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":480199,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"b37c4bf2a7dbb9f77d06dd432864a7b8","sha1":"32c34b2fe3e519fe7e4bbce966b0477fff61ed25","sha256":"46ed3fc4723e5b202d269dcb5b9c2165df51ae3dfd6a4e9bba825792c3dee020","sha512":"645a1c830c7542ba3678d639e8066a8cf2920d4845e8e6b3d262e33c875927666c868fcfdc5da2cd1fe2720b7a2a7717e7ec63bb6aa2bc106152cd065b5614ea","ssdeep":"6144:QbVo+HnBZbztBvOBcbSBBH+Bxi6BBH+Bxi6BlvdgHIWVd0GYFHBSbWbpfTR+kUq4:gHBZVBbGvwIWVdZ6h4W17TXeUDKovJHk","tlshash":"03a413ca73fec0934d18fa861a871174075c8fcc05d8c27b562a65a658527aaf7b23ec","first_seen":"2024-07-11T14:40:33Z","last_seen":"2026-06-07T08:04:05.554588Z","times_seen":2003,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/system/settings/consolidated?_=1773497002018","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:23.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/system/settings/consolidated?_=1773497002018 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nAuthorization: \r\nX-Timestamp: 1773497003224\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:23 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: g9w0ze4732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3bbYrzNIKd0ORYqfG85yGQHnDUfHFKmlRPzJkShNiE26657J7aPBXcmY9G7tys7EvpBX2ByN%2F%2BjDc66eKuvG%2B7fMFVENEzI0YXhuNUFhSe0%3D\"}]}\r\ncf-ray: 9dc3d24e2b892382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38302,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b9fba18ff6967a8ab4ce71f7300bccda","sha1":"e79790d745b9ee89dfb1a73ee3b709d9921c31f6","sha256":"c3cd260ad91472b54be08435d358f5ada6d96e4b10e84655b79c2517e84edd94","sha512":"9b4b666d85b1db3cbbab93bd0ab51c08a3201fcfd8576b6ff3a746917e1b6cb4f12f93a765e9b35e72675d26c96c57ad79278f283272496abbbb0feeed1f93cb","ssdeep":"192:POckhuImFlAuLbV85l4a3LldHk9Ki1hCF5BBO5wOUkR1JADQXxvu6dCCI46UJ+Kr:PehuImFnLb+5lm+C7h5CEsW3fzp","tlshash":"9103cc09a430e9af2d4ec0c4e4fd991b49ed4e7ad5fd00719c0c28ad12eb9a60757be7","first_seen":"2026-03-14T14:04:22.022844Z","last_seen":"2026-03-14T14:04:22.022844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/css/chunk-vendors.e93b14f5.css","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:19.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /css/chunk-vendors.e93b14f5.css HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:19 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 09:54:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a952cc-d439\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nexpires: Sun, 15 Mar 2026 13:31:23 GMT\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkGOP833Ue8IY1VivaJtcHExpqc%2FyLibPfcCyg4AjPRdIuigdaIyxR2ClZUGWTxE6jhsOU0IFJ2NkBiB8jnyrqEX7OCHaG9Zkkzo068WTAk%3D\"}]}\r\ncf-ray: 9dc3d238abea2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54329,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54329), with no line terminators","md5":"746df395f5a93e4470bf8d4e160d6f96","sha1":"f3d644cc794b55fb5bbd7cf89361d6467a111c84","sha256":"406ef907d49038f1b2f344ce7565ca033f9c76819dd26f5d91a3f33c5ff6f150","sha512":"d48ab6fa0509ea4fdf4eb5d3b6cf7db8b913be69df8a47ae97575ff1bc51aeb70a8d706a149ba18dad9cbf5cced5cf75055efae2819d0afa016ac2a0dc430366","ssdeep":"384:Lg8DUHZ//y81EG/wX1q/y5Ccfi5oemXjoV5c:LvDUHdb/wX1f5bfi5oemXjo8","tlshash":"493363219a40312aa1338e6947d496a8c739c743e2133eee3551b9c1cfd7eeb31da247","first_seen":"2026-03-14T14:04:22.055626Z","last_seen":"2026-03-18T22:43:16.647147Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/relay/WPSCORE_getDownloadSetting?domain=89444794.com","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:21.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/relay/WPSCORE_getDownloadSetting?domain=89444794.com HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-app-trace-id: 9ntgh2a732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: COMM3\r\nx-elapsed-time: 2\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFPkquJtjln%2F%2FltHKZiAUeAaRYejRL8ZzfxUbR%2BfWYBQKFUx9xucePqwHdBL5pM2ouZOWsPOVpM2npNK%2Fg3wFf8ZUPZstmXnXfrOIphiNx0%3D\"}]}\r\ncf-ray: 9dc3d2442d4f2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3943,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e64883925ae6494190b970fb5da390ce","sha1":"34df1ad65710fa725acca5daaea5f056dcccc8d5","sha256":"514686794e7535193f1316c7d7ac8527324a882b16a121662c701e5edc02cfd3","sha512":"aa0ff8417b5ab6b4e2f59b829fe8f6a0852dadc8b4cae947616551eac8e7903202593965b2b83da97f6fad156ff4e955a1bd3e80697797948011a5e7e18499be","ssdeep":"","tlshash":"dc81686f2d016ab30dc6d04da26d7e53311ccd7b10a2a8664839d2bd7ebbc7903138a7","first_seen":"2026-03-14T14:04:22.037558Z","last_seen":"2026-03-18T22:43:16.621886Z","times_seen":3,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/wps/agent/affiliate?domain=89444794\u0026code=jasmine2020","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /wps/agent/affiliate?domain=89444794\u0026code=jasmine2020 HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nMerchant: elitlbs2\r\nDevice: web\r\nLanguage: EN\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-app-trace-id: s3eg3w3732\r\nx-robots-tag: noindex,nofollow\r\nx-module-id: AFFMAN3, AFFCODE3\r\nx-elapsed-time: 3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RRRFJONWlllhepVpZxtGKF2UTNKpGrwvXQgqUkYt38wilMHjpl1hVKgo6YRrHv0xZFZDgN2S0RxN6ttirh9o6Uf%2BryYc3NLJatE3xxg%2FwO0%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9dc3d2489fda2382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6613cfd4ec395b41dabe3e0f5680d8b4","sha1":"b5ecdfa003beae02fb1debac04c29f2561a49c6a","sha256":"337952f67fcdcc5988a9cf587bb6793eb4dd4b527a7f3e204a4c647d58fa37fc","sha512":"6e0ec1dd22c393c7271634df1430fdd29c443bea12c873eb93eee0c0e2fe96cdbd061a1a3f98adcf308df29673684240c15b763917394f824cf34b92f4c7259a","ssdeep":"","tlshash":"1db0120010404852c847361014d43f12b63c00a38c0408b1658dc634c5e8455914350e","first_seen":"2026-03-14T14:04:22.056467Z","last_seen":"2026-03-14T14:04:22.056467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.89444794.com/mc/v.1.0.1/manifest/qrcode.min.0d19c585.js","fqdn":"www.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"172.67.203.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.89444794.com/register?affiliateCode=jasmine2020","date":"2026-03-14T14:03:22.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /mc/v.1.0.1/manifest/qrcode.min.0d19c585.js HTTP/1.1\r\nHost: www.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.89444794.com/register?affiliateCode=jasmine2020\r\nCookie: SHELL_deviceId=3e74fa44-98be-4414-865b-bd552ab631a1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 12 Mar 2026 02:36:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b226c1-4bf2\"\r\nexpires: Sat, 14 Mar 2026 16:15:39 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE\r\naccess-control-allow-headers: Merchant,Authorization,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' data: https: wss:; worker-src 'self' blob: https:; img-src 'self' data: blob: https:; frame-src 'self' https: kbzpay: wavepay: gcash:; font-src 'self' https: data:; object-src 'none'; base-uri 'self';\r\nedgebot-custom-tl-cache-tier2: MISS\r\nage: 78462\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8%2FENsZVhup7O0f04ZqizyK8lF9PS2jDTov%2BUVQaoAdPw949rHCJqTtDKGxacJlGBPGXF5pcdvxrwAp3mnmiYODvh7cXJvORHeiFcbmihfk%3D\"}]}\r\ncf-ray: 9dc3d24adc862382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19442,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19442), with no line terminators","md5":"0d19c5856e872e3f6fb9d0f57bea8dce","sha1":"ce36bde12504b53d0baebd5ee359631cc5172bad","sha256":"03528877abcd8ec6452eac177f2750c551e57632ac2d855ad5bcd6343891bbc2","sha512":"188cde9b65214ec7d1a4508b462c4251bef7e9a1a9d945535d5cb07b1b07ff4e27988b3eaf5a67af999af17b2737ae04412bb1dce122d44f32590a1123ca4669","ssdeep":"384:2IKSnIPLflpMR++8OiXAAdTRZgMvu4nvqqHHHsglNov3m1xk0ZkGULMyzLyURyy2:GmXimr4niqPDzZuiDy2","tlshash":"0392c4e9f35403a6525d5cc5282e644aa4b0b4272c1641acffb5c4e6e8bcfd1b83af70","first_seen":"2024-12-01T04:34:39.996683Z","last_seen":"2026-06-08T14:29:32.827168Z","times_seen":2085,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jasmine2020.89444794.com/js/chunk-vendors.e5791b68.js","fqdn":"jasmine2020.89444794.com","domain":"89444794.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jasmine2020.89444794.com/register","date":"2026-03-14T14:03:19.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89444794.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 12:46:34 GMT","end":"Wed, 10 Jun 2026 13:45:08 GMT"},"fingerprint":{"sha1":"A3:D7:68:FC:90:38:F3:EE:C7:1E:CD:F9:D2:7A:CB:C4:3E:06:C9:70","sha256":"18:3B:CF:59:25:E7:DA:AD:C1:6F:E1:4E:E3:1A:E6:02:24:C9:FA:AE:FD:3E:D6:0F:44:48:C9:1A:70:F0:47:7B"}}},"request":{"raw":"GET /js/chunk-vendors.e5791b68.js HTTP/1.1\r\nHost: jasmine2020.89444794.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jasmine2020.89444794.com/register\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.xhyEK0_l.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=17660244\u0026group=53\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=2c991db3-e6c6-49b7-baac-c633d87bd0f4\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2026-03-14T14:03:22.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/9.xhyEK0_l.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWy0yO6_uxAX8o0Ngf0io0nTQuFSgP-Z6Coct8P0_GOtxycgfUeETUHFMVGsCE5Jl1sP52k5a7k\r\nlast-modified: Fri, 13 Mar 2026 10:07:12 GMT\r\netag: \"c96a39460d2b0a92409b2b92f3da88f9\"\r\nx-goog-generation: 1773396432382916\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 74\r\nx-goog-hash: crc32c=pjIEnA==, md5=yWo5Rg0rCpJAmyuS89qI+Q==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Mar 2027 14:03:22 GMT\r\ndate: Sat, 14 Mar 2026 14:03:22 GMT\r\ncontent-length: 74\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":74,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c96a39460d2b0a92409b2b92f3da88f9","sha1":"c1ad7e3c7f38743ebadf589676726dad6799a9d5","sha256":"af2012b0cdfa449f186df2f8dc9b3e64b48b8c5c630cc8d3c4df61973499e7c4","sha512":"c6a642b4f09c7dc0b2679c972cc99e4c1e00e268d309aae062883d3eeeb7d3e39bef53388dd20aae7f733da57ed2374c1b12ded0997cbca2762b4b03c332cbfd","ssdeep":"","tlshash":"27a022ca38ca32ae020230300f0f20c0e0b8c02c030e0328800a0200b2300a002ffc3c","first_seen":"2024-06-24T12:34:03Z","last_seen":"2026-06-07T08:09:45.62326Z","times_seen":18421,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}