{"report_id":"e0c55a2a-0de4-4499-8d1b-c55658a94f01","version":6,"status":"done","tags":[],"date":"2026-03-28T14:55:45Z","url":{"schema":"http","addr":"hfnewpg.vip","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":0,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hfnewpg.vip/","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"title":"HF-Market","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hfnewpg.vip","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":0,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T14:55:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api.hf7893.cc","ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2025-12-13T04:04:38.167422Z","last_seen":"2026-03-22T14:13:43.548923Z","alert_count":0,"request_count":14,"received_data":90972,"sent_data":6886,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hfnewpg.vip","ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"domain_registered":"2025-12-17","domain_rank":0,"first_seen":"2026-03-28T14:55:47.235111Z","last_seen":"2026-03-28T14:55:47.235111Z","alert_count":0,"request_count":32,"received_data":2325039,"sent_data":14156,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hfnewpg.vip/assets/TabItemSfc-C-4hHVDg.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5cbe9d11dee51fd21d249991c1752d97","sha1":"edc7fb6f139c4604527f5d2ea8a28b7ddfa5f10c","sha256":"7662f866496b0bf9d4b5112b4212851c20f33ff2071ccc32a35c0f9074a7d266","sha512":"f1bce4d5cae20c9737187b9713cee9db22d5cd3b411c1d5d875771d0a30f31682153630935f46ff098c671bf9c9f75c34ad332cf186a70f58de56738c3034b48","ssdeep":"192:cVnmyiDpfTF4NbJfuowX05q67wwhfB18c/x1byAzAJLnbtvCm9NDiwGBDwcsNHtc:cVnm19J4RsxXqq67wwhfBymgAzAJLhD+","tlshash":"2e220a587944b433d7370051b1694890a33b9be8b424f2d0b157ef6a3ce2c6c6fee669","size":10704,"data":"","first_seen":"2025-12-13T04:04:45.143025Z","last_seen":"2026-03-28T14:56:49.824163Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/index-bYlwcE10.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28247cc46aed23b5ad77538dab9452c7","sha1":"5b730b7722d33671bf23b6e5c8f40183a2ae1c44","sha256":"f4d6b2400b2cac6be7b23c53da09482696d739eff97c0ac679dc3ed7af9c57e8","sha512":"b815455f72abbc508c68c4973f62f7f2afc31d61d37603cb3a5216f5760913e3f472a50b028f2921e0dd52b1467585e685fb84568c2f33a5983c921454d53abf","ssdeep":"24576:Lx5Cr5LLVxnqfCdlVB/duo/B2dIaWFhtt2UmXelb9sIa5CGON3giJoFRI3k2QQk:Lx5Cr5LLVxnqfCdlVB/df/B2dIaWFhtK","tlshash":"4b6545a4b0cbe8a943dbc59454ba1290b2184d523148bcf2dcbddc9bbce1576c2b7f19","size":1469542,"data":"","first_seen":"2025-12-13T04:04:45.1797Z","last_seen":"2026-03-28T14:56:49.839435Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/_plugin-vue_export-helper-DlAUqK2U.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-05-03T11:47:41.081401Z","times_seen":19352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/MarketTabs.vue_vue_type_script_setup_true_lang-Dv9ISv1Y.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8a3cba96b2bd95f9c5466639086220ff","sha1":"067c92d4afe78b10ceac881f1927cf1ccaed513e","sha256":"10643e549807b3fec7b01f4b9006dec41734b937b6a519f13a15eeb0e0b7e17d","sha512":"632f9a9b4f0c0b3d329a95357ba1a75bc9dc16cb1c9db1644c0291c4035860a5bafcb822649df7b2a37f0687b7656d0f7aad2797be8c6d6161d37c3e562d9249","ssdeep":"","tlshash":"0c519609301a9178d6a70bb888244050cd1d2b9fe001cf5b92bc9c683f57cf5eaeab5d","size":2998,"data":"","first_seen":"2025-12-13T04:04:45.141419Z","last_seen":"2026-03-28T14:56:49.823002Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/PaperSfc-Bdb5KBqh.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"091040e1ac29ac14c9e46973ac4349f0","sha1":"0a3728452e6db2ee0bd92f8d99a43544e9e5e3e7","sha256":"216aea079049b87d822f762dfe9204cb60c0414fd1069a4143fe4c3025e42533","sha512":"8e59b80119ca334f807250ca969ba4d8043ee91314b202935598b8b549f08a7a413c609421c7e381fd349da4abfeeb08c360ac8f62aa1cafaaae27a0373461bd","ssdeep":"","tlshash":"8911026ab51eb077917b00d740585744157149bcd63184e1e692763f050f1683fe9605","size":1032,"data":"","first_seen":"2025-12-13T04:04:45.161172Z","last_seen":"2026-03-28T14:56:49.820064Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/web-CVgRRlQU.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18cc98e00475feefbc507a582e60f117","sha1":"0ded04214a63260561ddf6f9b1f3ff4497e3e0c6","sha256":"61d7135eb0452701c266dc09ee365f009caa222efd6fb8eb270314c2fd99577d","sha512":"cbf2ad475f292b0ea1b7561bccd173ac2a28dd47a5f2eccb82e19b868ec843c87ad7bd69bfe4053f3000f8f5ad4fa51a6a43b5eef5aec33f898db9823b8709cb","ssdeep":"","tlshash":"a421dc5023db6b2205cc74e090b2613af212b9d4bc5b907df06d6ad118a1f85427eeb7","size":1245,"data":"","first_seen":"2025-12-13T04:04:45.177677Z","last_seen":"2026-03-28T14:56:49.834843Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/MainWrapper-XuUduUpM.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c61cb1571918d9e4420195c5170b6432","sha1":"7ffd0c930364dd30238164e5fac8d8108b9d9114","sha256":"855491b1638a4371aef4327272ea8c94175751b6d05a0edb6462193890862589","sha512":"483c9c19c32c8e0da7a19858b9beac9c9e38f1db853b7b07c566b8200c1a4e638e4b0c601b735c8ac1311470ad13227553d5e62dd9b1fec39391734276c8e2d4","ssdeep":"192:jDRYqCvwCWVlDY8POcYGrk/a68MZ3XJT8XwseyoFwX5AEAioIcCcz:XRYLICWXY8PO9EMZJT8gseyfJVAioIYz","tlshash":"2c12f9447908ba7b937341b5400d8880623917dde85491d5b3dfae6c2fd78b426efb2a","size":9099,"data":"","first_seen":"2025-12-13T04:04:45.149353Z","last_seen":"2026-03-28T14:56:49.830604Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/CellSfc-Bb2ID5zb.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a6e275a408d66eb530d2213251992a50","sha1":"30c8732a1c829429fd9c23846971245fbb254f3f","sha256":"8a6079b6f1eab118446ee297d8ad82bc9a8fbd913e940d02879d17aa9086a60c","sha512":"4b1949df568fbcdcb1cf1f08ebfc007ab67eff02db6bd6996931e7e2afeeece80d8dc1cc6066f869963ba599128c8ac9dbfcb912b2452dc4cc5b1e8dee5a0f49","ssdeep":"","tlshash":"4c3154683c45977b89a76081a45d1c08b1f42f9cc86040c67ff3924ebf159a99bfb31c","size":1765,"data":"","first_seen":"2025-12-13T04:04:45.16479Z","last_seen":"2026-03-28T14:56:49.836056Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/config-Dvz9uSFg.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7a7f97545ae57588854195ab20135a19","sha1":"1c74eaf20aaeb39d8bcb869481639bb4ee66f4ed","sha256":"dc6d6fcbb7862ddd807adfe7bbf9c7dab48e2441e2fc6c86331f409560b9f008","sha512":"a04346fa29920d08741c03d64977e570cd3e8a2f0509bc853eb2dbbd142181d308062bec186bd1427c27f4411a12bc9042d5ee084b114549e0d64857f5fbe8a8","ssdeep":"","tlshash":"8fd09220f5110379ec0ea7c85601645ac3ccc416a5e49dc5f0b51c072f56f4d68f8f3a","size":255,"data":"","first_seen":"2025-12-13T04:04:45.155858Z","last_seen":"2026-04-22T14:47:40.414371Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/LocalesSwitcher.vue_vue_type_script_setup_true_lang-C9WI8WUJ.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9cd76720f13077e53f5bee6233485cac","sha1":"824905d28d1ecadb9f0d83ae8e3ba336969d0d01","sha256":"7499d27b289e8431c433bf89c7b0411fb813cdaacdf3bebb9ce56956231563d9","sha512":"c12ab074f3aefe3d3236d33274f208cd643156f516a42c678c9d758cdc15d443281ca486c0dceec933db04af63ce9e2a2345f8db1367d8d5efdc4521695ecae4","ssdeep":"","tlshash":"8901235ab86a57b6132f988094084025482c8aff6e1ccad0a15f28242f158998bbd368","size":660,"data":"","first_seen":"2025-12-13T04:04:45.150959Z","last_seen":"2026-03-28T14:56:49.831643Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/HomeView-BlSbDjWF.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5307e948b039d11d1d00b76d8b7185e","sha1":"88799d3753b12d9073c0a7624e9b036ebb8d4084","sha256":"5ef9ac1d9c977f24a5f05c17a29ce943bca3c65ae9b4e3406532708ac4b52358","sha512":"d9d50de392f94af23a4d61e16e4c0d970bacb34c5a317d9763507ecc100756d6c628180f14449bff867f5e8c0fd6028923f0b0b562eb43aad557cc1e1f95d918","ssdeep":"96:j2AX2sGOZN1FyfjPP7XjtgE+r4slG/tXO8BtZ4ef+nUeuX4zoLb5BPVk8u9:bGz414bXTuBJl6tKef+UeuIQbtL0","tlshash":"56a1d80e705acfbec2a3895494550001da181f9fd216d70be1fedc143fa1cb85aa973c","size":4748,"data":"","first_seen":"2025-12-13T04:04:45.147796Z","last_seen":"2026-03-28T14:56:49.819158Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hfnewpg.vip/assets/HomeView-BlSbDjWF.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/HomeView-BlSbDjWF.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/assets/index-bYlwcE10.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-128c\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4748,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4589)","md5":"e5307e948b039d11d1d00b76d8b7185e","sha1":"88799d3753b12d9073c0a7624e9b036ebb8d4084","sha256":"5ef9ac1d9c977f24a5f05c17a29ce943bca3c65ae9b4e3406532708ac4b52358","sha512":"d9d50de392f94af23a4d61e16e4c0d970bacb34c5a317d9763507ecc100756d6c628180f14449bff867f5e8c0fd6028923f0b0b562eb43aad557cc1e1f95d918","ssdeep":"96:j2AX2sGOZN1FyfjPP7XjtgE+r4slG/tXO8BtZ4ef+nUeuX4zoLb5BPVk8u9:bGz414bXTuBJl6tKef+UeuIQbtL0","tlshash":"56a1d80e705acfbec2a3895494550001da181f9fd216d70be1fedc143fa1cb85aa973c","first_seen":"2025-12-13T04:04:45.147796Z","last_seen":"2026-03-28T14:56:49.819158Z","times_seen":10,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/loading.gif","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:23.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /loading.gif HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:24 GMT\r\ncontent-type: image/gif\r\nlast-modified: Tue, 18 Nov 2025 11:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b4-cff9\"\r\nexpires: Mon, 27 Apr 2026 14:55:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 400","md5":"97e23ab316dafad70085144a6c822a48","sha1":"0869aab79b03cca5d47f47cd4d45c8764659b34e","sha256":"1b5dd93a363984bac27654d1a3292cf711a40614e6f9623525ca1851a4298143","sha512":"e3481e1f5d5c410129686831cb37a304110e8f0171e45d93e6906a98d43666c70374a4700e2f71c0a814128e9728e584e67fbeed9b8a5204b9b60d4f1b571022","ssdeep":"768:PSLSAjUxtsF2TCy5yAM5cFs3dKNc0+gBrhaqDAXDCYafJhAzVAcJnPm/ccJGCDAf:nAQtMQyJ5cFu0+gfOX+4AmPmkcJuXP","tlshash":"3933df797168a7bc9a2e46fd048a40ea3cefcc411d6218e30da0f87f624d57c645dc8b","first_seen":"2025-12-13T04:04:45.170156Z","last_seen":"2026-04-22T14:47:40.433923Z","times_seen":49,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/MainWrapper-Gj84qH4k.css","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/MainWrapper-Gj84qH4k.css HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-1d83\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7555,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7554)","md5":"943b1e5662c2a5a55ceceb522666bbdd","sha1":"e8b6e35ea07df090cbc88c5ad6d0b7dcdae3803f","sha256":"28e04059d06060defebc0338d5caf844541b6228b240ffb4199f52f171d294c4","sha512":"cdf886fc222811aceae9064625a2826390fafebaade3ab01045076a5ccc68db74fcc50069aa04ae88131b5993b32976a589284b92cc18d7622a2632e167fed94","ssdeep":"96:r9eQBNnMdnTNSHwSw7LVefXspZ0hdcmnaAB5rFx699y0NmWFJAtt82JIJ:Hkn7LVQXspZ0hRaABZFxWZp","tlshash":"38f18892b5b4667e9737e3bb9f4dd29ce126d9f4c89137e473c6132409c1ae82223e05","first_seen":"2025-12-13T04:04:45.171325Z","last_seen":"2026-03-28T14:56:49.816473Z","times_seen":10,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/HomeView-BlSbDjWF.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/HomeView-BlSbDjWF.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-128c\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4748,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4589)","md5":"e5307e948b039d11d1d00b76d8b7185e","sha1":"88799d3753b12d9073c0a7624e9b036ebb8d4084","sha256":"5ef9ac1d9c977f24a5f05c17a29ce943bca3c65ae9b4e3406532708ac4b52358","sha512":"d9d50de392f94af23a4d61e16e4c0d970bacb34c5a317d9763507ecc100756d6c628180f14449bff867f5e8c0fd6028923f0b0b562eb43aad557cc1e1f95d918","ssdeep":"96:j2AX2sGOZN1FyfjPP7XjtgE+r4slG/tXO8BtZ4ef+nUeuX4zoLb5BPVk8u9:bGz414bXTuBJl6tKef+UeuIQbtL0","tlshash":"56a1d80e705acfbec2a3895494550001da181f9fd216d70be1fedc143fa1cb85aa973c","first_seen":"2025-12-13T04:04:45.147796Z","last_seen":"2026-03-28T14:56:49.819158Z","times_seen":10,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/TabItemSfc-C-4hHVDg.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/TabItemSfc-C-4hHVDg.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-29d0\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10704,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10703)","md5":"5cbe9d11dee51fd21d249991c1752d97","sha1":"edc7fb6f139c4604527f5d2ea8a28b7ddfa5f10c","sha256":"7662f866496b0bf9d4b5112b4212851c20f33ff2071ccc32a35c0f9074a7d266","sha512":"f1bce4d5cae20c9737187b9713cee9db22d5cd3b411c1d5d875771d0a30f31682153630935f46ff098c671bf9c9f75c34ad332cf186a70f58de56738c3034b48","ssdeep":"192:cVnmyiDpfTF4NbJfuowX05q67wwhfB18c/x1byAzAJLnbtvCm9NDiwGBDwcsNHtc:cVnm19J4RsxXqq67wwhfBymgAzAJLhD+","tlshash":"2e220a587944b433d7370051b1694890a33b9be8b424f2d0b157ef6a3ce2c6c6fee669","first_seen":"2025-12-13T04:04:45.143025Z","last_seen":"2026-03-28T14:56:49.824163Z","times_seen":10,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/CellSfc-Bb2ID5zb.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/CellSfc-Bb2ID5zb.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-6e5\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1765,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1764)","md5":"a6e275a408d66eb530d2213251992a50","sha1":"30c8732a1c829429fd9c23846971245fbb254f3f","sha256":"8a6079b6f1eab118446ee297d8ad82bc9a8fbd913e940d02879d17aa9086a60c","sha512":"4b1949df568fbcdcb1cf1f08ebfc007ab67eff02db6bd6996931e7e2afeeece80d8dc1cc6066f869963ba599128c8ac9dbfcb912b2452dc4cc5b1e8dee5a0f49","ssdeep":"","tlshash":"4c3154683c45977b89a76081a45d1c08b1f42f9cc86040c67ff3924ebf159a99bfb31c","first_seen":"2025-12-13T04:04:45.16479Z","last_seen":"2026-03-28T14:56:49.836056Z","times_seen":10,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/indexList","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:36.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"OPTIONS /api/app/indexList HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://hfnewpg.vip/\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\ndate: Sat, 28 Mar 2026 14:55:37 GMT\r\naccess-control-allow-origin: https://hfnewpg.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U91s1Shb9BxSm05k%2B01sr1%2Bgy2JgOJ%2FuLYYCCSpNkOoU8F9e9nkX3XBrQUZEzwexGjcM6OAAdmdiskugBSE66UpQcBBGR4jpc3zdt8fqZ15iJ738kJAGDEe79og6juoc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e377a0efad95691-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T11:30:45.364402Z","times_seen":14577318,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/indexList","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:40.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"OPTIONS /api/app/indexList HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://hfnewpg.vip/\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\ndate: Sat, 28 Mar 2026 14:55:40 GMT\r\naccess-control-allow-origin: https://hfnewpg.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DrJR4Ip1bcflf%2BgdpU6m%2BoWkMeTePGVBHbX2%2BD%2FaSQTQ%2FM5r4UWmxUnBwKt%2F5mbnXxdSKEMpb%2Fe2l8DFypJZzlnLNT9ukD%2FYE5krmbul9AwGP1HeSuxjJb8opKpMgpAU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e377a26fb6c5691-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T11:30:45.364402Z","times_seen":14577318,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T14:55:23.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 963\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\netag: \"691c54b6-3c3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":963,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"66a14aa910ad26770d2a6a0fb193eebc","sha1":"5a303acfefe10d82f278cf076021f610a6b89a54","sha256":"28187325b26f44ed2c9bd4592b21393b7dd6b9a3f7d12f849c90455ad443c35e","sha512":"8d17e36d254c5888a865acdcec7ce048994f2029276ebb1701e3f2d481a179c2bb8b652e54f6729529a5f392cd7111f8ecb93f7b52a0a42cdbb63cb773513721","ssdeep":"","tlshash":"e211ef4494f38589512e41292fd2b5281a51a28387195d5c7bfe02b69f84a4548df6e4","first_seen":"2025-12-13T04:04:45.168933Z","last_seen":"2026-03-28T14:56:49.833473Z","times_seen":10,"resource_available":true,"data":null}},"time_used":829,"timings":{"blocked":342,"dns":42,"connect":147,"send":0,"wait":146,"receive":0,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/web-CVgRRlQU.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:25.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/web-CVgRRlQU.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/assets/index-bYlwcE10.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-4dd\"\r\nexpires: Sun, 29 Mar 2026 02:55:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1245,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1244)","md5":"18cc98e00475feefbc507a582e60f117","sha1":"0ded04214a63260561ddf6f9b1f3ff4497e3e0c6","sha256":"61d7135eb0452701c266dc09ee365f009caa222efd6fb8eb270314c2fd99577d","sha512":"cbf2ad475f292b0ea1b7561bccd173ac2a28dd47a5f2eccb82e19b868ec843c87ad7bd69bfe4053f3000f8f5ad4fa51a6a43b5eef5aec33f898db9823b8709cb","ssdeep":"","tlshash":"a421dc5023db6b2205cc74e090b2613af212b9d4bc5b907df06d6ad118a1f85427eeb7","first_seen":"2025-12-13T04:04:45.177677Z","last_seen":"2026-03-28T14:56:49.834843Z","times_seen":10,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/index/logo","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:25.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"GET /api/app/index/logo HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nlang: en-US\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://hfnewpg.vip\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7NKdx9AAi1L4Nm7fvZeob9K%2Flfl9M5Q%2BObE6nQeW%2F4Lb9P%2Fn7kaTo9HigRxu3jYHwH6wE9EKbDzGzQ8pFYAvBJvwnsf94uWrr3aQRhGjibw0y9DJyaYpuuwW3UQFFh58\"}]}\r\ncf-ray: 9e3779cb490b5696-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2a0f6d01c66213f1c5970980c97e9f95","sha1":"ed6e0c7d42e696f8af6d81d08d10bd791a73d9ae","sha256":"ed0963ca9285eaa6a400fc72868a161698cb327445a3928db915762ea9054d73","sha512":"454df6cc50bcb5fa00bc0e7f779ccde83a9f75da5c323905b1b4d0f7a748018875394de6072a0e7ff845d80e2005660a8abbef3c91500d01139c8a285b31d4bb","ssdeep":"","tlshash":"1de0abde259ec0a4234003c0bc933624d5e8231f358cdb59e84dce554c4832c724182a","first_seen":"2026-03-28T14:55:50.551183Z","last_seen":"2026-03-28T14:56:49.836682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/PaperSfc-Bdb5KBqh.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/PaperSfc-Bdb5KBqh.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-408\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1032,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1031)","md5":"091040e1ac29ac14c9e46973ac4349f0","sha1":"0a3728452e6db2ee0bd92f8d99a43544e9e5e3e7","sha256":"216aea079049b87d822f762dfe9204cb60c0414fd1069a4143fe4c3025e42533","sha512":"8e59b80119ca334f807250ca969ba4d8043ee91314b202935598b8b549f08a7a413c609421c7e381fd349da4abfeeb08c360ac8f62aa1cafaaae27a0373461bd","ssdeep":"","tlshash":"8911026ab51eb077917b00d740585744157149bcd63184e1e692763f050f1683fe9605","first_seen":"2025-12-13T04:04:45.161172Z","last_seen":"2026-03-28T14:56:49.820064Z","times_seen":10,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/_plugin-vue_export-helper-DlAUqK2U.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper-DlAUqK2U.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/assets/MainWrapper-XuUduUpM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 91\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\netag: \"691c54b6-5b\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-05-03T11:47:41.081401Z","times_seen":19352,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/indexList","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"GET /api/app/indexList HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nlang: en-US\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\ndate: Sat, 28 Mar 2026 14:55:27 GMT\r\naccess-control-allow-origin: https://hfnewpg.vip\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rvqjrpIODIxqJnjauD2F2l1%2Bn2fLCl5enQr%2Bn1EoDds6usIp0YVjorlY5wSiCPPipjP7Wg72Dz6uTGGMjRdzmtIP5IZHcYliEa7U0GPoRaqxek3VIix81cBivSCIiAYP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3779cfcffa5691-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14151,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3c3d863e17d3b5820cefb991e975b7b0","sha1":"25cc5d56568c851a5a91641b2cb9414c170bb7c1","sha256":"78435af82c0f236c83b0c714439c6ebc1b870c332b6c46faf09badc4fc824996","sha512":"13970e7286e9147860a6852508182feecec327c2a50c380e6c3862f2dd8e4109e4685faf00346e4c38f5db763567634d494d101abdf1d60fc0027711053a360b","ssdeep":"384:k5/vHkXHX/v9kNoKjkIrgPKJKFqhtGtxNLkKmrg3bjWWKgxIuf+K+eKT:mEXXOeIromIWtcLwNrIxLia+nj","tlshash":"8c52549a77ac48a9d5c4cbc25c4b39e81cdc321f2d4a8b767ef9de9c04e46b9630b405","first_seen":"2026-03-28T14:55:50.554526Z","last_seen":"2026-03-28T14:55:50.554526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/headAd-BIPz0K7n.png","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/headAd-BIPz0K7n.png HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-31957\"\r\nexpires: Mon, 27 Apr 2026 14:55:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203095,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 358 x 376, 8-bit/color RGBA, non-interlaced","md5":"eeed2456d2361d5ba543647f8c05ce0f","sha1":"49952242e40a11e841acfd07af4807991ccfa4ae","sha256":"471a16f3fdd1ebefdd90ebb1be2dc5b123a31b4b6d8347f2b148feda3994e786","sha512":"275e0fee4ce7d14af6c9710312b5dfc7a32abb982312e4835d95f0d85e28558ee0b8f29d8e6bb01534ab2a776d4b3da63b980a81b6937f16f9f2613e8d6e7cb1","ssdeep":"3072:c1p+iUHXW0ugLNH+MgUB0eH+eXB4+EchsCY0wlHbu91PJknKu3ddvYJLhWk:c2iUHGoZ7gU+K4oPY/bmknN3ddvatWk","tlshash":"a51423ee11dc0ee209236a7fe8e0ba1289fe19e716a56f1cb173780123636175ed7d44","first_seen":"2025-12-13T04:04:45.176419Z","last_seen":"2026-04-25T19:45:47.009281Z","times_seen":12,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/indexList","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:29.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"OPTIONS /api/app/indexList HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://hfnewpg.vip/\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\ndate: Sat, 28 Mar 2026 14:55:30 GMT\r\naccess-control-allow-origin: https://hfnewpg.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zLjdSZE1F3X%2FkSiaMBxauzeDLGXc8fOzcRBkAMxoLaGfhhb1QHoESizO0xC6dfpRHbqncKDTxvVS7A2DAw4hoMoOXDZyCl3gjQbsg31GRyMZrTtFOWcH1KIoFpFSNxpN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3779e2e8b85691-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T11:30:45.364402Z","times_seen":14577318,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":308,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/index-gbBigOp5.css","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:23.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/index-gbBigOp5.css HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-5bdd0\"\r\nexpires: Sun, 29 Mar 2026 02:55:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":376272,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"53066d6c4fca97285077006775a76ff8","sha1":"bbb17c06c833e6b7409a1e38dd6295de600d68f6","sha256":"30b7bf7a097f95eb517ba70e5b09f5cef3ce8b6c0efeced1eb7672ca1cedbe75","sha512":"86ec7b9d7f4f235719b07c79fbaa4a34b66766d728a5988a1151792c601812a751fb7ea6aacd8bdf71547ec269f82657e6f866c9fb37198c16bdd01b531161c6","ssdeep":"6144:ADxsaZsWzScYW8YBaPhVLNsrdZe5vSvYVbP5QCofZxuzzXlQG64xsASwl:AD1hzScYUBaPhVLNsrdZe5vkYVbP5QCV","tlshash":"7384f7b4eb8086bcaf1be629878b66dcba3cf572ed00d6b4f10552144ec37f91913925","first_seen":"2025-12-13T04:04:45.15261Z","last_seen":"2026-03-28T14:56:49.828038Z","times_seen":10,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/indexList","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:30.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"GET /api/app/indexList HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nlang: en-US\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\ndate: Sat, 28 Mar 2026 14:55:30 GMT\r\naccess-control-allow-origin: https://hfnewpg.vip\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jpJsrtW5Wf7raYGlxiPf4RCWShWJbvF28T%2BwIRPc0AoIN%2BFBnUkcLUF9GqhGYm5JIq00Pv31r0Yvu3CQk2LI4CgHhfaT2DgR3QpK8g82JY2DBxTSWFPsxgFW8ynytxnS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3779e4d8e35691-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14158,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2caffa77f78e5e44b5e4e2b617478e6f","sha1":"ade765cd6af176ea2295d82df8bce3db1aa1d1d7","sha256":"bd9aeb7ed386be7f6cd1d59fc6f34d8c5e3fc283b98eebeb3d3a5c264acb2226","sha512":"0a615ba7cc0a0ed8ea8d9b7fb5c1ab9bae19d4f98435af3ef32527f7d250f76f3787a3469250f1db6a10d009ff2dfb283011deb611a59fa03b3ad23536be2ba8","ssdeep":"384:kuvvKkcVaPv6kNEvprgYvsBvGuhtGj5453vIrgMvZ5MQ5tvx35seKT:JRcqBGhrDYOatyOVgrLB3zp36j","tlshash":"9952239977ac48a9d4c4cbc25c4b39e81cdc321f2d498bb66ef9de9c44e4abd630b405","first_seen":"2026-03-28T14:55:50.557252Z","last_seen":"2026-03-28T14:55:50.557252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":926,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/indexList","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:33.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"OPTIONS /api/app/indexList HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://hfnewpg.vip/\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\ndate: Sat, 28 Mar 2026 14:55:33 GMT\r\naccess-control-allow-origin: https://hfnewpg.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5vBKJYgWzCjvDkdYDgq2wyLfseefS844wSat690gMIDVpmUM44NbH%2F0TCSNFvnHV0gMS3nEtSOUuQav1K0izUNSUcf6p5X%2BeVMCmspuO71ny%2Bklsm0hkLS3LAq1IjozZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3779faaa015691-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T11:30:45.364402Z","times_seen":14577318,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/indexList","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:33.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"GET /api/app/indexList HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nlang: en-US\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\ndate: Sat, 28 Mar 2026 14:55:34 GMT\r\naccess-control-allow-origin: https://hfnewpg.vip\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=idHre3MCU2gnS8ZoZv5jYr1b5Sfi2pxD5A7AA4cmI4fceoiBy8dOzcKkCaOnl5VapRtFJJeWDSjiOfcY3hb%2Fmnbb5z2MFbDOeCxW%2BukmLoWdel%2BlXN5sZAXL%2F9K1%2FfGn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3779fcaa0e5691-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14125,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6a8012f628dc739e838af16cdb687e5b","sha1":"d1499371aa2398c9526aaa46c9f81bfe1637f718","sha256":"cc61c88fea7b1142b5c17c830fc828f64a933a872115f8776c3ca4bb04a0cea2","sha512":"a9d02af4fdc374cdb9abbaa6136191f16c63fb9f2ad84d6f30374979ce51660097b72b944467695ab94237221ab6751cbec9aaea80304e0099f1e6cb124c057e","ssdeep":"384:k/qvmksAR6BcvOkNR0aTL0Ln0zohF0Sl9l4lPrgMvOlFlnvx352ToT:ZlTLNLVPKnG4Ff7uhrLG3tp3sm","tlshash":"685263a977ac48b994c4c7c25c4b39e81cdc321f2d4a8bb62ef9df9c45e46b9630b401","first_seen":"2026-03-28T14:55:50.558122Z","last_seen":"2026-03-28T14:55:50.558122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/indexList","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:37.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"GET /api/app/indexList HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nlang: en-US\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\ndate: Sat, 28 Mar 2026 14:55:38 GMT\r\naccess-control-allow-origin: https://hfnewpg.vip\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9DTlXYgXsMT7b5aqL80YurUio3klCgod6BrHhU4I7MVS4mM0faiz5mZOMv9l0WSH8iC%2Bwcomk3bVx%2B%2F7CYMRrFJnt2xACCKcks4vPWH4ZCGgKGxT9dsZOnnpat%2FwcjV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e377a10daea5691-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14128,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f04fa9302667641d75086d6922206e08","sha1":"ed2926dc14482384cd2a884c25f070e7662da6ea","sha256":"b52b7feb050fcfdab1d9cbd0609db6f9966b950de79fa3039b6a38e128972ec7","sha512":"5fcf114f2b359eae8b8c91ab6bd71523f01ec0b12cdb3ae5390592ae955b801b752ef50aa15430ce71c2174cfa93a4307ee0d0f71e7969a5114d1a1047e0a8ca","ssdeep":"384:kp8vzkBbnOvBkN8PuT6aP4PEChF0OAspPkP4rgMvOApAQAaQ56PxT:ZIBy6CWmag8eFD1cgrL2erdQ4p","tlshash":"5f5242a5779c487994c4c7c25d8b39ec1cdc321f2d4a8bb66ef9de9c44e46bd620b401","first_seen":"2026-03-28T14:55:50.558993Z","last_seen":"2026-03-28T14:55:50.558993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/indexList","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"OPTIONS /api/app/indexList HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://hfnewpg.vip/\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://hfnewpg.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LjGZYCnZiOjN%2BIN8tIo0PHTSkFZkSx31oZLB6zhLnXcwmrKuka0dA2aC6Te18PaY5me0Siv6LQkvNKQFipOO3wSzhNo6Go%2FKLgmAE1tTm7QIRzhpvTsefuZWSGfcl4HM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3779cdcb455696-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T11:30:45.364402Z","times_seen":14577318,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/PaperSfc-Bdb5KBqh.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/PaperSfc-Bdb5KBqh.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/assets/HomeView-BlSbDjWF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-408\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1032,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1031)","md5":"091040e1ac29ac14c9e46973ac4349f0","sha1":"0a3728452e6db2ee0bd92f8d99a43544e9e5e3e7","sha256":"216aea079049b87d822f762dfe9204cb60c0414fd1069a4143fe4c3025e42533","sha512":"8e59b80119ca334f807250ca969ba4d8043ee91314b202935598b8b549f08a7a413c609421c7e381fd349da4abfeeb08c360ac8f62aa1cafaaae27a0373461bd","ssdeep":"","tlshash":"8911026ab51eb077917b00d740585744157149bcd63184e1e692763f050f1683fe9605","first_seen":"2025-12-13T04:04:45.161172Z","last_seen":"2026-03-28T14:56:49.820064Z","times_seen":10,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/TabItemSfc-C-4hHVDg.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/TabItemSfc-C-4hHVDg.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/assets/HomeView-BlSbDjWF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-29d0\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10704,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10703)","md5":"5cbe9d11dee51fd21d249991c1752d97","sha1":"edc7fb6f139c4604527f5d2ea8a28b7ddfa5f10c","sha256":"7662f866496b0bf9d4b5112b4212851c20f33ff2071ccc32a35c0f9074a7d266","sha512":"f1bce4d5cae20c9737187b9713cee9db22d5cd3b411c1d5d875771d0a30f31682153630935f46ff098c671bf9c9f75c34ad332cf186a70f58de56738c3034b48","ssdeep":"192:cVnmyiDpfTF4NbJfuowX05q67wwhfB18c/x1byAzAJLnbtvCm9NDiwGBDwcsNHtc:cVnm19J4RsxXqq67wwhfBymgAzAJLhD+","tlshash":"2e220a587944b433d7370051b1694890a33b9be8b424f2d0b157ef6a3ce2c6c6fee669","first_seen":"2025-12-13T04:04:45.143025Z","last_seen":"2026-03-28T14:56:49.824163Z","times_seen":10,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/LocalesSwitcher.vue_vue_type_script_setup_true_lang-C9WI8WUJ.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/LocalesSwitcher.vue_vue_type_script_setup_true_lang-C9WI8WUJ.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/assets/HomeView-BlSbDjWF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 660\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\netag: \"691c54b6-294\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":660,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (659)","md5":"9cd76720f13077e53f5bee6233485cac","sha1":"824905d28d1ecadb9f0d83ae8e3ba336969d0d01","sha256":"7499d27b289e8431c433bf89c7b0411fb813cdaacdf3bebb9ce56956231563d9","sha512":"c12ab074f3aefe3d3236d33274f208cd643156f516a42c678c9d758cdc15d443281ca486c0dceec933db04af63ce9e2a2345f8db1367d8d5efdc4521695ecae4","ssdeep":"","tlshash":"8901235ab86a57b6132f988094084025482c8aff6e1ccad0a15f28242f158998bbd368","first_seen":"2025-12-13T04:04:45.150959Z","last_seen":"2026-03-28T14:56:49.831643Z","times_seen":10,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/united-kingdom-CamCehN9.png","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/united-kingdom-CamCehN9.png HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-4c77\"\r\nexpires: Mon, 27 Apr 2026 14:55:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19575,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"aac0dfefc080856931658ea9c760534e","sha1":"6495d0a202721472461a53b11c79aea953184a7c","sha256":"16d2af8dfe6bff63fd76dc7434e09f1c98de85b1aa8d35ab98b473bae3c1f97d","sha512":"b515165c08b5ce687c5e346d0ccebef61c18479e0cc351d03206c22271093564b9bd5d71bb172f37c2d36c11c74d1f8360878b39dd5e1d5a1e16ca7f99e6f40f","ssdeep":"384:padN/jQnWhc1RHy0kXMsjjGabl8QAQObXTbzR3S0Ay25iW0yIVu9EUaYwu:paXsn/1cTMpaIXT/RCyHH6mw","tlshash":"e592d16a46a7857368484a387c4c41a883e94d0f139f322dffcb69c46b767395577882","first_seen":"2023-04-14T10:28:17Z","last_seen":"2026-05-03T12:02:08.830043Z","times_seen":522,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/getNews","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:27.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"OPTIONS /api/app/getNews HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://hfnewpg.vip/\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\ndate: Sat, 28 Mar 2026 14:55:27 GMT\r\naccess-control-allow-origin: https://hfnewpg.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jh4rxYzlD1QVOBX5f3%2FZQs9me9YQcDChcASdtkIeTnxgzUC4L4MCx3%2FYJL4OghbAm8sp7Ghu2VcDKlHPvLcOYBc5kcix2lUu1DfOeeb5sPEYnhCgz1TiWctqxRkWhmTx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3779d258175691-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T11:30:45.364402Z","times_seen":14577318,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/CellSfc-2w4mhYVQ.css","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/CellSfc-2w4mhYVQ.css HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-5be\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1470,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1469)","md5":"6c09dca13a8a624b5036aa96f1780137","sha1":"26571a9ea136f6c462fe49361f75f82af45c51db","sha256":"e0154ab8dae966b73ccf94078b61a340d9787fe769147aaecdfcfc3b088fb41d","sha512":"c57dbc094876d854fa3cd1a3af755632f7b4c396c6db82a50f5ecd8bf9214236ead9f33274db84223953c0c143a99e9872fb44b4142698211085ebe0d1f3e365","ssdeep":"","tlshash":"c031d8bdee60c2ade05fba193fe88bacf964ab748c1585657f40401063c27f389d3910","first_seen":"2025-12-13T04:04:45.174789Z","last_seen":"2026-04-22T14:47:40.400088Z","times_seen":49,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/_plugin-vue_export-helper-DlAUqK2U.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper-DlAUqK2U.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 91\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\netag: \"691c54b6-5b\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-05-03T11:47:41.081401Z","times_seen":19352,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/MarketTabs.vue_vue_type_script_setup_true_lang-Dv9ISv1Y.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/MarketTabs.vue_vue_type_script_setup_true_lang-Dv9ISv1Y.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/assets/HomeView-BlSbDjWF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-bb6\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2998,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2995)","md5":"8a3cba96b2bd95f9c5466639086220ff","sha1":"067c92d4afe78b10ceac881f1927cf1ccaed513e","sha256":"10643e549807b3fec7b01f4b9006dec41734b937b6a519f13a15eeb0e0b7e17d","sha512":"632f9a9b4f0c0b3d329a95357ba1a75bc9dc16cb1c9db1644c0291c4035860a5bafcb822649df7b2a37f0687b7656d0f7aad2797be8c6d6161d37c3e562d9249","ssdeep":"","tlshash":"0c519609301a9178d6a70bb888244050cd1d2b9fe001cf5b92bc9c683f57cf5eaeab5d","first_seen":"2025-12-13T04:04:45.141419Z","last_seen":"2026-03-28T14:56:49.823002Z","times_seen":10,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/CellSfc-Bb2ID5zb.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/CellSfc-Bb2ID5zb.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/assets/HomeView-BlSbDjWF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-6e5\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1765,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1764)","md5":"a6e275a408d66eb530d2213251992a50","sha1":"30c8732a1c829429fd9c23846971245fbb254f3f","sha256":"8a6079b6f1eab118446ee297d8ad82bc9a8fbd913e940d02879d17aa9086a60c","sha512":"4b1949df568fbcdcb1cf1f08ebfc007ab67eff02db6bd6996931e7e2afeeece80d8dc1cc6066f869963ba599128c8ac9dbfcb912b2452dc4cc5b1e8dee5a0f49","ssdeep":"","tlshash":"4c3154683c45977b89a76081a45d1c08b1f42f9cc86040c67ff3924ebf159a99bfb31c","first_seen":"2025-12-13T04:04:45.16479Z","last_seen":"2026-03-28T14:56:49.836056Z","times_seen":10,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/config-Dvz9uSFg.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/config-Dvz9uSFg.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/assets/HomeView-BlSbDjWF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 255\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\netag: \"691c54b6-ff\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7a7f97545ae57588854195ab20135a19","sha1":"1c74eaf20aaeb39d8bcb869481639bb4ee66f4ed","sha256":"dc6d6fcbb7862ddd807adfe7bbf9c7dab48e2441e2fc6c86331f409560b9f008","sha512":"a04346fa29920d08741c03d64977e570cd3e8a2f0509bc853eb2dbbd142181d308062bec186bd1427c27f4411a12bc9042d5ee084b114549e0d64857f5fbe8a8","ssdeep":"","tlshash":"8fd09220f5110379ec0ea7c85601645ac3ccc416a5e49dc5f0b51c072f56f4d68f8f3a","first_seen":"2025-12-13T04:04:45.155858Z","last_seen":"2026-04-22T14:47:40.414371Z","times_seen":49,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/123-CXw4K0zh.png","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/123-CXw4K0zh.png HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-1a67f\"\r\nexpires: Mon, 27 Apr 2026 14:55:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 416 x 269, 8-bit/color RGBA, non-interlaced","md5":"49062bc83e3fffe9b82d3294bcaeb2f9","sha1":"9e1a90f35efbd629b398a685a10a46b231f1a6a2","sha256":"45a76f47e6b95d7e3c552f5c0a035139f591997a4dce7bf8284e1d781eb8ded8","sha512":"476fa53a2d14082f188c356165fd979de3b0f2177d99744b1daef17b05b0c7935f4a32b6b9562717a4f1a8c64b57787759a3c78e0517cbbc708b49a2c0e4de82","ssdeep":"3072:ad/+hpVyBokTeFpQ+Ixlb1YHbDVu+A7SaLY6JYK9V0:LaBVqFC3b1Cxu+QYo9a","tlshash":"e0b312cbf0378c46d789ed8767768b4a6099e02e5cf63761d18fe0436683676c9c4688","first_seen":"2025-12-13T04:04:45.166102Z","last_seen":"2026-03-28T14:56:49.827346Z","times_seen":10,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/indexList","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:40.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"GET /api/app/indexList HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nlang: en-US\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\ndate: Sat, 28 Mar 2026 14:55:41 GMT\r\naccess-control-allow-origin: https://hfnewpg.vip\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mx7YSrmL6KWHSoeuJpMAWD%2F7pZuomzYO5SljGfOl7aU4PdBw2jwQ6FrfcK2bUMpy59glfYmRtAL5pG3ysvV8lyj%2F8O7QbRgo8VccqNS4hMlhMsj2nqa2iULaF17Gy1LF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e377a28db7b5691-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14106,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7378ed54ed9ca80045941d79522befcd","sha1":"7bfc7d1d15a104371ff860672d5693a0a0c5cd0d","sha256":"e148d71ec8841780291a208dd05a4e15c77d531046525b741a2ed0f058fbd6cd","sha512":"9c5a002ab1e4ef602f2754429d4aeb4e96688a73998a044c50eae27dd8aa97644f5ab90e627795225875d874cb0ad3f63849832edb0849cd98b2db286e8936f3","ssdeep":"384:kwofvnk23eofvdkNLqlq2qXXaqtohxR4UAsRRGq6rgMvuRKkqrqEwRpPxT:+Hk2bHuBstKXa64xaU9MTrLWIk8bwzp","tlshash":"1052529677ac48b995c4c7c25c8b39e81cdc321f2d4a8bb66ef9de9c05e46bd630b401","first_seen":"2026-03-28T14:55:50.564659Z","last_seen":"2026-03-28T14:55:50.564659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/MarketTabs.vue_vue_type_script_setup_true_lang-Dv9ISv1Y.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/MarketTabs.vue_vue_type_script_setup_true_lang-Dv9ISv1Y.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-bb6\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2998,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2995)","md5":"8a3cba96b2bd95f9c5466639086220ff","sha1":"067c92d4afe78b10ceac881f1927cf1ccaed513e","sha256":"10643e549807b3fec7b01f4b9006dec41734b937b6a519f13a15eeb0e0b7e17d","sha512":"632f9a9b4f0c0b3d329a95357ba1a75bc9dc16cb1c9db1644c0291c4035860a5bafcb822649df7b2a37f0687b7656d0f7aad2797be8c6d6161d37c3e562d9249","ssdeep":"","tlshash":"0c519609301a9178d6a70bb888244050cd1d2b9fe001cf5b92bc9c683f57cf5eaeab5d","first_seen":"2025-12-13T04:04:45.141419Z","last_seen":"2026-03-28T14:56:49.823002Z","times_seen":10,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/config-Dvz9uSFg.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/config-Dvz9uSFg.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 255\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\netag: \"691c54b6-ff\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7a7f97545ae57588854195ab20135a19","sha1":"1c74eaf20aaeb39d8bcb869481639bb4ee66f4ed","sha256":"dc6d6fcbb7862ddd807adfe7bbf9c7dab48e2441e2fc6c86331f409560b9f008","sha512":"a04346fa29920d08741c03d64977e570cd3e8a2f0509bc853eb2dbbd142181d308062bec186bd1427c27f4411a12bc9042d5ee084b114549e0d64857f5fbe8a8","ssdeep":"","tlshash":"8fd09220f5110379ec0ea7c85601645ac3ccc416a5e49dc5f0b51c072f56f4d68f8f3a","first_seen":"2025-12-13T04:04:45.155858Z","last_seen":"2026-04-22T14:47:40.414371Z","times_seen":49,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/index-bYlwcE10.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:23.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/index-bYlwcE10.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-166c66\"\r\nexpires: Sun, 29 Mar 2026 02:55:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1469542,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49417)","md5":"bdac69122d2b8b11732ec0597e58eb03","sha1":"d48d8f2df68c745d486495fdb4573a676363912c","sha256":"ccd2527eaac7c92eae2ac7fba8609997b1927026e62cef1e099d6c4e95451418","sha512":"185768985a432a1ae2b2150c804b5dbc96eb0ca69a8c0873360b60220b3c04f06390865e21c570f3baff743a296515d35ccb9a5d6ea1b8bb7d1225c138d4c27a","ssdeep":"24576:Lx5Cr5LLVxnqfCdlVB/duo/B2d+ayF7FaFhtt2UmXeMo9sIaK:Lx5Cr5LLVxnqfCdlVB/df/B2d+ayF7F4","tlshash":"a845c090b0cbe9a943db8490687a12d0b618cd527148acf3dcbddd5abce05b5c2b7f19","first_seen":"2026-03-28T14:55:50.565986Z","last_seen":"2026-03-28T14:55:50.565986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/index/logo","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:25.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"OPTIONS /api/app/index/logo HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://hfnewpg.vip/\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 28 Mar 2026 14:55:25 GMT\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: https://hfnewpg.vip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang\r\naccess-control-max-age: 0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tv%2FyAZn4IQOnydPRjgOB7900udOFO%2FPZorcBlkYCTsGJH2PzWkX29bX92DjUh5bT38FWzN6goMpjUFkJwBpdkUrcdG%2BqpoTiElzrc7wKwmXC5ULxGDWY3ap80FLcL0hB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3779c6fcdd5696-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T11:30:45.364402Z","times_seen":14577318,"resource_available":true,"data":null}},"time_used":775,"timings":{"blocked":43,"dns":23,"connect":1,"send":0,"wait":685,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/TabItemSfc-CtDGY3Wu.css","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/TabItemSfc-CtDGY3Wu.css HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-f56\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3926,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3925)","md5":"d1e7ec83d14bd56b5e3de26d963ce2a1","sha1":"7e32c36d58a30acd9f8a2f021c5e5282f69939fd","sha256":"2b61ed65a76918e8f23e4ef4262a26b205c3c8cbf6ce45ce06619d41172528c0","sha512":"8ae0ea6eda9bac7526a750c411ebea30a3244738406cc097b0c3e02bba407da3ad52b5d61fd7c388b56a86814be73dbf1d7f39682c3d391b99986efa36a24223","ssdeep":"","tlshash":"2d8157b1d6a04425c4335123aace9ad8d13dcde172613ba471922e0ec6beaf4470fb4a","first_seen":"2025-12-13T04:04:45.139977Z","last_seen":"2026-03-28T14:56:49.837394Z","times_seen":10,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/HomeView-U3eU_knH.css","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/HomeView-U3eU_knH.css HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 549\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\netag: \"691c54b6-225\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":549,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (548)","md5":"3d453b7ed215b6676baf3f89ef5c9ada","sha1":"e05efe68b271efd90f070401e8ad1d5b2b00bbf9","sha256":"7d455f4eab28df6124ca576a5f357af5496e2cdc856ba826b048ac27ca61ccb4","sha512":"0cb08dc634f4b371db1ca84388df4774520a1fd96550d79ffc07ddb7c4efc6fa30ba2df22fbd21add712f6e3a8df82a45e27d4f740e703ab54e0cdbeb5ed346d","ssdeep":"","tlshash":"8bf08b94e274902e3337c8ceb5f8231c482da96395033ff422512ee0c3112ce6a38401","first_seen":"2025-12-13T04:04:45.159788Z","last_seen":"2026-03-28T14:56:49.818022Z","times_seen":10,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/MainWrapper-XuUduUpM.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/MainWrapper-XuUduUpM.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-238b\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9099,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9098)","md5":"c61cb1571918d9e4420195c5170b6432","sha1":"7ffd0c930364dd30238164e5fac8d8108b9d9114","sha256":"855491b1638a4371aef4327272ea8c94175751b6d05a0edb6462193890862589","sha512":"483c9c19c32c8e0da7a19858b9beac9c9e38f1db853b7b07c566b8200c1a4e638e4b0c601b735c8ac1311470ad13227553d5e62dd9b1fec39391734276c8e2d4","ssdeep":"192:jDRYqCvwCWVlDY8POcYGrk/a68MZ3XJT8XwseyoFwX5AEAioIcCcz:XRYLICWXY8PO9EMZJT8gseyfJVAioIYz","tlshash":"2c12f9447908ba7b937341b5400d8880623917dde85491d5b3dfae6c2fd78b426efb2a","first_seen":"2025-12-13T04:04:45.149353Z","last_seen":"2026-03-28T14:56:49.830604Z","times_seen":10,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/LocalesSwitcher.vue_vue_type_script_setup_true_lang-C9WI8WUJ.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/LocalesSwitcher.vue_vue_type_script_setup_true_lang-C9WI8WUJ.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 660\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\netag: \"691c54b6-294\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":660,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (659)","md5":"9cd76720f13077e53f5bee6233485cac","sha1":"824905d28d1ecadb9f0d83ae8e3ba336969d0d01","sha256":"7499d27b289e8431c433bf89c7b0411fb813cdaacdf3bebb9ce56956231563d9","sha512":"c12ab074f3aefe3d3236d33274f208cd643156f516a42c678c9d758cdc15d443281ca486c0dceec933db04af63ce9e2a2345f8db1367d8d5efdc4521695ecae4","ssdeep":"","tlshash":"8901235ab86a57b6132f988094084025482c8aff6e1ccad0a15f28242f158998bbd368","first_seen":"2025-12-13T04:04:45.150959Z","last_seen":"2026-03-28T14:56:49.831643Z","times_seen":10,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hf7893.cc/api/app/getNews","fqdn":"api.hf7893.cc","domain":"hf7893.cc","tld":"cc"},"ip":{"addr":"172.67.130.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:27.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hf7893.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 05:44:12 GMT","end":"Mon, 25 May 2026 06:40:21 GMT"},"fingerprint":{"sha1":"4B:DE:CE:7B:48:B6:0E:04:B9:08:AF:C4:91:1F:75:BF:1A:3B:B1:EC","sha256":"97:FF:6F:F4:BC:0A:4A:46:F9:4C:7F:B8:78:8F:7B:D3:B3:EC:E0:10:41:63:00:B9:D1:85:19:C8:FE:A3:7E:49"}}},"request":{"raw":"GET /api/app/getNews HTTP/1.1\r\nHost: api.hf7893.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hfnewpg.vip/\r\nlang: en-US\r\nOrigin: https://hfnewpg.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\ndate: Sat, 28 Mar 2026 14:55:28 GMT\r\naccess-control-allow-origin: https://hfnewpg.vip\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Authorization\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fzo9CT1F9RwDiEQHqZ0OX08uSKfIqhVqYyP6EzFMnSqzd8BELMs8CgDJ%2FISZumFqjb1qUkQr3D2U34DCKPQ6Z8KjccbSQGFc5tmFvnIA4ib7J67pLCa0%2Blc5p%2FkhtUap\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3779d6d8405691-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8069,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"413e5be250c42beea9c51f1ee1e41039","sha1":"9257851218a16e3c03bd1dca385867dce89ca8d1","sha256":"3f82d393ed997a4d9c15ab132e159f96e24fc9ad81c41073395c32305424b614","sha512":"878305e1719506fdf1ba069e6dd8981e13f0e028eadcd08e944645da3185b08d5434fae1f20804418a73242be9124290f2885b009c679752929c25b931d03047","ssdeep":"192:B2sQA0YRENQVRi/cJ0vWGqUxWLlVP9wxl4wnwyA:B2sQF4EO3i/cJeWGqAWLlVP9wxl4wnw1","tlshash":"53f11329d5fe99fc974492cc80476e9f9e96314227d8cbc3a344de5c53684ee011e1eb","first_seen":"2026-03-28T14:55:50.571408Z","last_seen":"2026-03-28T14:56:49.832145Z","times_seen":2,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/logo.jpg","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:25.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /logo.jpg HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:25 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"696f155d-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-05-03T11:34:52.649952Z","times_seen":259894,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/PaperSfc-Dlr0l2mL.css","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/PaperSfc-Dlr0l2mL.css HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 358\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\netag: \"691c54b6-166\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (357)","md5":"804ed6dff41e1c0f7c48007004155fd4","sha1":"2c9a4b9f36727ce06d4979d13a4aa76a5fe8d043","sha256":"49e1228c9c973e98ff26fafa142395f8fcb6961c882a616ab10e9d4e8e2fd14a","sha512":"c01d6202bc4f7717c56b7b6849aa370b85c24e72c35edee4e6a5ea44b4ad7cb07445143675fb4de3deba1a41d5945f5a05b9d848cd6778e4bf7ae1a9aaae75da","ssdeep":"","tlshash":"d8e0d8a4eb4d527db42fe724d5db8bcba61aa17144504628b05436e810c6d96cc7340d","first_seen":"2025-12-13T04:04:45.154401Z","last_seen":"2026-04-22T14:47:40.430415Z","times_seen":32,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfnewpg.vip/assets/MainWrapper-XuUduUpM.js","fqdn":"hfnewpg.vip","domain":"hfnewpg.vip","tld":"vip"},"ip":{"addr":"154.26.192.23","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfnewpg.vip/","date":"2026-03-28T14:55:26.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hfgoldexchange.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 18:54:05 GMT","end":"Sun, 10 May 2026 18:54:04 GMT"},"fingerprint":{"sha1":"F1:FE:1B:B5:8D:C0:E1:22:FF:55:44:4A:09:E5:80:03:E0:E3:97:60","sha256":"E0:B9:35:46:44:70:42:D3:4A:C8:4C:7D:06:0C:43:93:82:36:DB:8C:96:EA:64:01:6D:7D:34:7B:68:E1:22:85"}}},"request":{"raw":"GET /assets/MainWrapper-XuUduUpM.js HTTP/1.1\r\nHost: hfnewpg.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hfnewpg.vip/assets/index-bYlwcE10.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 28 Mar 2026 14:55:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Nov 2025 11:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691c54b6-238b\"\r\nexpires: Sun, 29 Mar 2026 02:55:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9099,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9098)","md5":"c61cb1571918d9e4420195c5170b6432","sha1":"7ffd0c930364dd30238164e5fac8d8108b9d9114","sha256":"855491b1638a4371aef4327272ea8c94175751b6d05a0edb6462193890862589","sha512":"483c9c19c32c8e0da7a19858b9beac9c9e38f1db853b7b07c566b8200c1a4e638e4b0c601b735c8ac1311470ad13227553d5e62dd9b1fec39391734276c8e2d4","ssdeep":"192:jDRYqCvwCWVlDY8POcYGrk/a68MZ3XJT8XwseyoFwX5AEAioIcCcz:XRYLICWXY8PO9EMZJT8gseyfJVAioIYz","tlshash":"2c12f9447908ba7b937341b5400d8880623917dde85491d5b3dfae6c2fd78b426efb2a","first_seen":"2025-12-13T04:04:45.149353Z","last_seen":"2026-03-28T14:56:49.830604Z","times_seen":10,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}