{"report_id":"e8ad96d6-3353-4943-b574-f89e9cb3ba5f","version":0,"status":"done","tags":[],"date":"2026-09-15T14:40:56Z","url":{"schema":"http","addr":"x-pay.cyou/","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"172.67.212.14","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"x-pay.cyou/#/","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"title":"Xpay","dom":{"size":4571,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2267)","md5":"2e71d662e47b1018f068fb984a0bf908","sha1":"376dfaa6255895d74f0def1f6f24ace6798b2341","sha256":"a759010cee310704cd4033d7916172445e2938d1884eecd30c5897416d8db3d3","sha512":"2f5dea6d5e0068968db23131bab43919ac4177cebc96de0a5ad51edfb528b8c1e704a6a6aa7c23584241afaa29cd4338f8ff6bad91fbf8520b38e291a27880b7","ssdeep":"96:RSrpBuj7Gy93YhwLMaY60YZ/CqbO0mUsGi:RCm7/93Yhwoajc0nfi","tlshash":"c39120e35dd098192351577adfd6b808aa31611b88159d74f0de20ed8fe0ee2c8d7739","dom_hash":"domhashc50aea9dedc2eb965614d441651fb88f","first_seen":"2026-09-15T14:41:05.961236Z","last_seen":"2026-09-15T14:41:05.961236Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"x-pay.cyou/","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"172.67.212.14","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T14:40:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api.x-pay.cyou","ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-14","domain_rank":0,"first_seen":"2026-09-15T14:41:02.552431Z","last_seen":"2026-09-15T14:41:02.552431Z","alert_count":0,"request_count":6,"received_data":4450,"sent_data":3228,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"x-pay.cyou","ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-14","domain_rank":0,"first_seen":"2026-09-15T14:34:55.902457Z","last_seen":"2026-09-15T14:34:55.902457Z","alert_count":0,"request_count":15,"received_data":5440759,"sent_data":6523,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"x-pay.cyou/ac-chat.js?2.0.1789393870953","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1876b5ed96b30caadd25965563a59434","sha1":"12ea862fa74ece93342e453697caec412e67938d","sha256":"de24d01af18e56461133a28c1f19bcd3c242ea7296ff07b722ad6d6fb5dea7bb","sha512":"c371ceeb7e78575b310225f270808992b7e036490ddf13bd9f1074f30edaa9a8e5fefe87ad939184442f9876220ed9c4f76539335bc84461d622234d6ebc5c23","ssdeep":"","tlshash":"1241afab47790224c20b11f72d4650943232a01faa0a1d3c79fc60d8ffaab7555e1ff9","size":2425,"data":"","first_seen":"2024-08-19T20:18:19.588895Z","last_seen":"2026-09-15T14:41:05.994541Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ace7275a8fe8f826d9b47827412328d9","sha1":"b7a04bae1548aff391b24326c1c6d49be358eb09","sha256":"53c231b6562925dd3264d40f3f59cc1d8b5c0267411cba722627ac4ceac61e90","sha512":"4ec4374fc3a2267b2f7121ab68f5d754aae71168d3f47b2898336ed9586856a5f52981325b56a2351770c79a3013a16c55889497b5481514ae1a4e114606ce0f","ssdeep":"","tlshash":"35f0276e166a7568230b909b862fb911252061a54006156577cca68cfbd6a6bc0ceb0c","size":570,"data":"","first_seen":"2026-09-15T14:34:58.898219Z","last_seen":"2026-09-15T14:41:05.995996Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/charting_library/charting_library.min.js","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-19T08:20:59.245826Z","times_seen":1469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/index-DiAsjFah.js","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35a2caedff91f1da64579b1e5d457763","sha1":"633f34fbfa96a53912ce83efbda840aa916b4f10","sha256":"327d236da2ae28cdd886e519738e844d73f1c1fd771239887ca0074a7f2e96af","sha512":"737b2b338e1f6badcafd4069d0845077b362b5beeaced892eb265e1348ee45c991b5b8122eaa163deac0a7f7f2cc31a176e6ad5227b83d2b075eff612227f8c5","ssdeep":"6144:/492+00JTV55TMNXbRJcpqvikHUGov8GJaVAePgMY:/4921o7MNXbrcpBkH68GkVAePgMY","tlshash":"54a41951f84a897ed7b7d554109e0800310c7f9bd00988a2bafdde562ba7df9336a738","size":463846,"data":"","first_seen":"2026-09-15T14:31:02.860406Z","last_seen":"2026-09-15T14:41:05.975889Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/vendor-4BSx--Tc.js","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56d90b40377d9ca0b144945fb7999bbe","sha1":"3f5d03faf286658f6fb902a5a07ede77870d6457","sha256":"29bfcfb7e851f56dcc82fb00b9f921f296ec337fe843ffc5575ad6c083e2448c","sha512":"eddb2b933b900fd5aa9b0cfbf1f8f9fa66b0cb67fdef5733ca8ed6a5012da9ac0e8a22eeaffe328883a456a0a7637c5617303734d303bf61caf2dd02ff034371","ssdeep":"49152:WFOyEm0e9lDckLzFbTB7P6En4ouaBCvmUxvXci7Zsm14mF44h/ZaWTPwipvTp4CC:0a54TnRWTsm14mF4+oZcZH3P74FOq","tlshash":"fe065cd57251b06147a721e5143f1002f3396d49b40e80a8f6acd9eb7dbd88ea27bf39","size":3958863,"data":"","first_seen":"2026-09-15T14:41:01.190384Z","last_seen":"2026-09-15T14:41:05.997711Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/#/","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1dfa497d7a8b07185a414466439205ba","sha1":"21706dd276209c356abe0d4f0afe7fa1b338c1ba","sha256":"d1a06887cebea6e13a3b0dcb03b85834f2da6945b72a431e87bea013a50867cf","sha512":"f9e9c2109811c5d45e6a66fa938a6e8e30da5dbb445dde95334bc4d8e006869453154d3547bdbc8146e8f6ee06554def94c2e0b66ec0f85da936d37853a3b3fa","ssdeep":"","tlshash":"d6e061ce74b14d823c4441a4d4c758b974514423881d3908b746dd142fefdddd4b856c","size":394,"data":"","first_seen":"2026-09-15T14:41:05.998575Z","last_seen":"2026-09-15T14:41:05.998575Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/index-0EB3RBSw.js","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f8cc556151cde0181d8d315abdddcff","sha1":"0931921cab50108989c6dd39d3a6ca71ceead8ec","sha256":"02ce4da2cf68042223d289617e75b13a6580e9535ea94557a7a753fec689d0c6","sha512":"141888b9ee9f61c568b1456f6ed37206f091a3c756357b767f6cf8769e04cb745c7760e8663760a300877ecff3acc4aff5eba9d173a7a9d46f7b1d6406aa14e6","ssdeep":"","tlshash":"8301446eed23977b495d4044e301a00422022ad0a379a1e0eb5c492263fd5b2ca6e71a","size":719,"data":"","first_seen":"2026-09-15T14:41:05.976622Z","last_seen":"2026-09-15T14:41:05.976622Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/index-D38iE-sx.js","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"233bc1fb1b5338e97ebaae1852a0261f","sha1":"6b329856aa25c3983c43330183c96ef620c69bb8","sha256":"f89af7e3dcc8833adf0e9a88cd430f1504dc05f6da694aae825b24c474449d4e","sha512":"7ff8c59852a6370bfaa592eee6c75c929dd7c63ce52c74b2388d96d60d6c38ea1c1fd9ec7ffc25a357b818a69dd9b71c69d0caf7438b6c548662b851455d40ae","ssdeep":"6144:QHbQU7sQzO72ZEVYlpkuMjBPHyeUothTFzI9p+Qz9:MDC6ZEmlpkD1/yrYhJ0Lz9","tlshash":"8f44f845b252a43253f281f640760401f32a7a8e7507847cb17dddeb2daed6d72bab38","size":277620,"data":"","first_seen":"2026-09-15T14:41:05.966631Z","last_seen":"2026-09-15T14:41:05.966631Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.x-pay.cyou/api/common/getAllSetting","fqdn":"api.x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:23.267Z","timestamp":1789483223267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://x-pay.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7AocyqpOHagGqNw%2Bd1WF4N%2FtZXbLy63apUVDdu%2BpliB0HzXx%2FzsB%2FMYDhvzUF907iqF5M%2Bo%2B3FuW3qjEgeLgxdPZ1dkSiv3jTqeOQiT4fjN0XjpSgvqwrn53fJitLE%2FYQ%3D%3D\"}]}\r\naccess-control-allow-origin: https://x-pay.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b862e17a341a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":723,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T02:48:29.131091Z","times_seen":18577312,"resource_available":true,"data":null}},"time_used":1047,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1047,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.x-pay.cyou/api/common/getCoinList","fqdn":"api.x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:23.271Z","timestamp":1789483223271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://x-pay.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fZWGspY9Y2YeI5v1TaYNBIt8CqDXVS87Y1YKRqg2OP2q1F5Kww%2FREwqhOaeup7g4vu5B9qu3vhMicAWS5QRuy5YY5kz%2FWiQ1vui8Sbf%2FzDH46%2BrXmSAkPambmP7OcxqlLA%3D%3D\"}]}\r\naccess-control-allow-origin: https://x-pay.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b862e17a361a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":715,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T02:48:29.131091Z","times_seen":18577312,"resource_available":true,"data":null}},"time_used":1756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1756,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/vendor-4BSx--Tc.js","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:22.278Z","timestamp":1789483222278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /assets/vendor-4BSx--Tc.js HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:22 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1MNJbAPL5jnYy1V5LtQJmrvfAe9Ju%2Fq%2FhtaOjilGbBOlUWrzOUMpdgy3TcLpDMuCWgvmmBK3Re59kzDYpiC5X%2FS47xnkI6bppFo3CNzJ%2Fxo%2BQwmtEnY8qpRA0xVm\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:51:11 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fbcf-3c684f\"\r\nage: 365\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b862db48901a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3958863,"size_decoded":1164317,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64365)","md5":"5ebefa53bb0a301d9ff3911a7311c487","sha1":"8b4e8922d399e58766d4ea65b4ff6d5dfb102e24","sha256":"01443802d0e6de81367f8d8a2540b9a5b9b63455b4254445cf96a94b82e23f52","sha512":"ed2ea042ae5fd22db56e215f72820397f3c0021acc653daaf5194e00c536808960aa39c6b3cff42e7bf1b7e183bb7ac4427c6e0ef390974045bc6bb2e632a316","ssdeep":"24576:WFOyEm0e9lDckLzFbTB7PjpxN8K3Bn4oua5HCvmUxoMb7ciLnZsm14mF4G:WFOyEm0e9lDckLzFbTB7P6En4ouaBCvN","tlshash":"dd253ac976d2f06107a764e140bb0007f3396e59740e84a8f1a9d8eb7db9d899277f38","first_seen":"2026-09-15T14:41:01.183364Z","last_seen":"2026-09-15T14:41:05.963961Z","times_seen":2,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/index-C78FyYSi.css","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:22.283Z","timestamp":1789483222283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /assets/index-C78FyYSi.css HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:22 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNtB0FJeXXVgR1%2BI7XYIicsCYihE9qWFWpM3i3wlSyB2BZUk9ZMU0Y2q2q%2FtjR3fhrOcA6eSxiA2llKPOTam5eAXnI4EMDI26wpBOlS2816qodqMeB52o6Q%2BSmBY\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:51:11 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fbcf-7ee9f\"\r\nage: 365\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b862db58931a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":519839,"size_decoded":96616,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"dab22c4509f84299cbe9be93d176ab14","sha1":"e5e238f317eb7d6b01aeb4664b202507f7501290","sha256":"1c0d714b3892682ff418f654119ff9f3cdd7e02799765cdb8d79c736f8dc9f9e","sha512":"7a0618ed9e26b3beed7fad9d5d57a940b488a6a8e6b3a4c4f1f3323c57809f16073aeebb9841e66b2784e278743c0af75439586dcc2cc2af766c2e6075bc065b","ssdeep":"6144:njN/9Spd+KmkZ8w71ZACkFDS3vyf58rBeV05TMZ+UgW:jN/HKTZ8w71ZACkFDS3vyf58rBeV05Tg","tlshash":"a3b4e869b55001396f33da69abcd96cce12cfe21c8029ee5f242551a0ec7ff72362617","first_seen":"2026-09-15T14:34:58.888477Z","last_seen":"2026-09-15T14:41:05.964774Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/platform/deriva/config.js?1789483223252","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:23.256Z","timestamp":1789483223256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /platform/deriva/config.js?1789483223252 HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:24 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOD3PBQV2eVre3VgcBD4DirJPZv2EkzUoQjXJOEuWntwEx5hsDzSj7A4RtYfXfDt9IYHYmxV7EI%2BIGSvLoKScMT%2B9LNyEqD%2BFODtUvP7qC8gdr%2BwSSYBIDxO8eDr\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:50:32 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fba8-170\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3b862e16a321a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368,"size_decoded":917,"mime_type":"application/javascript","magic":"ASCII text","md5":"2e704d6b6a18d74d60dc0ef3e908d493","sha1":"1cd2029224f7e87d4a47677ff7192d199f721733","sha256":"77018662dde678de0f131cf3d5c274199e70023a918cae021408333763653c4d","sha512":"8fa0389cee092a0a6b6be3cdf6473247077713b194978ff486165ceee341022f16900ab6079448cb0e8dc01f82ef2d55a27865862455faad1acd69cef4bcbe04","ssdeep":"","tlshash":"3be0208e74b58d823c4445a4d4c759b9b8924423c81d390cf74add142fafdded8b856d","first_seen":"2026-09-15T14:41:05.965466Z","last_seen":"2026-09-15T14:41:05.965466Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1537,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.x-pay.cyou/api/user/getCountryCode","fqdn":"api.x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:23.270Z","timestamp":1789483223270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"OPTIONS /api/user/getCountryCode HTTP/1.1\r\nHost: api.x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://x-pay.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t6mJMmu7TXBbMJZARt2EOiPlqHsP%2FYRGgi0TyhEKDnkb6nbH%2BSAZXHiNaT2S45yCdvkaCYthljHbiH55byW8Qf5oGJypRhTMAreulbaLZCSNZuXtCNxps4XzlweGI6mFSA%3D%3D\"}]}\r\naccess-control-allow-origin: https://x-pay.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b862e17a351a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":711,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T02:48:29.131091Z","times_seen":18577312,"resource_available":true,"data":null}},"time_used":1128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/index-D38iE-sx.js","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:23.289Z","timestamp":1789483223289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /assets/index-D38iE-sx.js HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9b%2BSMcUAWt11K3%2FMU0wKL5vM9IXvQvoy2apPFxKHqddqtX9CIffmc0XVx7sMPxCNUJrGy88F8JB1sf3YAz%2F6TbqbTpi5X6twBpZH%2FlyI7vXUOBbaav9BSPSlCur5\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:51:11 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fbcf-43c74\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3b862e19a381a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":277620,"size_decoded":86658,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"233bc1fb1b5338e97ebaae1852a0261f","sha1":"6b329856aa25c3983c43330183c96ef620c69bb8","sha256":"f89af7e3dcc8833adf0e9a88cd430f1504dc05f6da694aae825b24c474449d4e","sha512":"7ff8c59852a6370bfaa592eee6c75c929dd7c63ce52c74b2388d96d60d6c38ea1c1fd9ec7ffc25a357b818a69dd9b71c69d0caf7438b6c548662b851455d40ae","ssdeep":"6144:QHbQU7sQzO72ZEVYlpkuMjBPHyeUothTFzI9p+Qz9:MDC6ZEmlpkD1/yrYhJ0Lz9","tlshash":"8f44f845b252a43253f281f640760401f32a7a8e7507847cb17dddeb2daed6d72bab38","first_seen":"2026-09-15T14:41:05.966631Z","last_seen":"2026-09-15T14:41:05.966631Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":17071,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/index-DEOOmvTz.css","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:23.292Z","timestamp":1789483223292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /assets/index-DEOOmvTz.css HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:23 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3yoNX9UfdH7GLPo0FI6K0%2FSTsDU%2BR1FBvKlbK8XPtbuGm2E2d69%2FQNHCm1GA0TryjSHIB70P%2FYBZmnRi9YJ4iEv1Od18zTCV5F06CTtLz9wvI%2FodeIsdVveM0Ye2\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:51:11 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fbcf-1f1\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3b862e1aa3a1a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":949,"mime_type":"text/css","magic":"ASCII text, with very long lines (496)","md5":"78db1403425772f663b7a8e264334223","sha1":"7922023d2807f78d4972d0b85ff481f2073e01a6","sha256":"0d0ef1f6ac873cb74dad8c2bdc9893f43d2a246acdbd5171f246585dedd4d2d5","sha512":"4b0f81a16dafa721fe8767c809cba35acac33e2e9cc71cebc2bd731be97871de3ef2b27d50d6e31b7fb4fb6d4d83affd194b18d11b195f6125410e07411d1fa7","ssdeep":"","tlshash":"f0f084ace488b23b7d26c8c13d200288c0407c01819baaa0ea47277d58c3a632720328","first_seen":"2026-03-09T14:01:04.824046Z","last_seen":"2026-09-15T14:41:05.973444Z","times_seen":7,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/charting_library/charting_library.min.js","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:22.275Z","timestamp":1789483222275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:22 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDfUVEzFDZEi3rfDbyqjYDEt4L%2BT8b%2FDDwt1okTf66VgUemtb2VkzYyxPlyFC%2BAUoP8WlBGKld8PbT6iowVv0kzFKkxfE8mXRYLLaE6VmyZc5HksW1kkjG36VSsM\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:50:32 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fba8-2a6a\"\r\nage: 365\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b862db488e1a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":4011,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-19T08:20:59.245826Z","times_seen":1469,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/index-DiAsjFah.js","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:22.277Z","timestamp":1789483222277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /assets/index-DiAsjFah.js HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:22 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJCmcRhhAuNSohstjxXu%2BGk8wO%2F9P%2FMlQxSWM%2B0UxNHqHFL0NyW3S8JFcLoauDrsS%2FHdaatGj%2BmiMYNS3n%2BihWm6kLEvCk%2BR09tzlEIH%2BPd3dghbTBLd5jdOM6rM\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:51:11 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fbcf-713e6\"\r\nage: 365\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b862db488f1a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463846,"size_decoded":117251,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64555)","md5":"35a2caedff91f1da64579b1e5d457763","sha1":"633f34fbfa96a53912ce83efbda840aa916b4f10","sha256":"327d236da2ae28cdd886e519738e844d73f1c1fd771239887ca0074a7f2e96af","sha512":"737b2b338e1f6badcafd4069d0845077b362b5beeaced892eb265e1348ee45c991b5b8122eaa163deac0a7f7f2cc31a176e6ad5227b83d2b075eff612227f8c5","ssdeep":"6144:/492+00JTV55TMNXbRJcpqvikHUGov8GJaVAePgMY:/4921o7MNXbrcpBkH68GkVAePgMY","tlshash":"54a41951f84a897ed7b7d554109e0800310c7f9bd00988a2bafdde562ba7df9336a738","first_seen":"2026-09-15T14:31:02.860406Z","last_seen":"2026-09-15T14:41:05.975889Z","times_seen":4,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/index-0EB3RBSw.js","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:23.290Z","timestamp":1789483223290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /assets/index-0EB3RBSw.js HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:25 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y3UkYtqrxeMkKlhKXdspQpLJ%2FfhO622a8cSBS0%2BC6FQBvDg1P44ljQn8n1rVTLYuECO4IsXfUoNxzti6V9DS04au%2FwVTIO3pzopU3rkxREvRZ%2FWE%2FdbPIq2DvwXR\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:51:11 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fbcf-2cf\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3b862e19a391a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":719,"size_decoded":1154,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (718)","md5":"1f8cc556151cde0181d8d315abdddcff","sha1":"0931921cab50108989c6dd39d3a6ca71ceead8ec","sha256":"02ce4da2cf68042223d289617e75b13a6580e9535ea94557a7a753fec689d0c6","sha512":"141888b9ee9f61c568b1456f6ed37206f091a3c756357b767f6cf8769e04cb745c7760e8663760a300877ecff3acc4aff5eba9d173a7a9d46f7b1d6406aa14e6","ssdeep":"","tlshash":"8301446eed23977b495d4044e301a00422022ad0a379a1e0eb5c492263fd5b2ca6e71a","first_seen":"2026-09-15T14:41:05.976622Z","last_seen":"2026-09-15T14:41:05.976622Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/index-eaAmUr4l.css","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:23.294Z","timestamp":1789483223294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /assets/index-eaAmUr4l.css HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:26 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AGp1rZPAUviR4oSseaK1Leyb0QlucPIHQ1VSSP0iS1yHriuGoMyhNLCTCGBxPAjoXZwOa0QOShNCRxsNyCrb4ED73vsyGHI3YopOb5myVjLTlMRQqvex6qgBsfF\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:51:11 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fbcf-e5b9\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3b862e1aa3b1a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58809,"size_decoded":11028,"mime_type":"text/css","magic":"ASCII text, with very long lines (58808)","md5":"de87b8802cada0bf819b3fd8c327f3f9","sha1":"d0608b86db6381aba6fc6770f30e7f3ee0d88a78","sha256":"57fbb271cd2d442c2440c89f55d395ebe6569d9dc2f480ecbcc5dbde7237594e","sha512":"14a299b3af0b0e79f9a2cdae2e53332c49f2c917a102baf4179a4cdbecab5b818dd6f218bc55d76d0ab0312b8569f2f1a5d3ad38b5d022110a5732330468a7ed","ssdeep":"768:1ppepljGbniGuXFuamSTvKkEVldxatN2hl:fUjGuXFuamSTvKkEVTxaUl","tlshash":"c343c669b65c2239f83bd6d6be94498cb108ff52d1439ad8f65b1b350ccb5e32a30748","first_seen":"2026-09-15T14:41:05.978795Z","last_seen":"2026-09-15T14:41:05.978795Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3692,"receive":3664,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.x-pay.cyou/api/common/getMt5Amount?coin=xau","fqdn":"api.x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:25.312Z","timestamp":1789483225312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://x-pay.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yOf%2B8ZQr3wxhXwkAHEtd7h0ViMD%2BQmqR5ScdExPgOdukBLtvujYT4svNcBcrQ%2FQSYco4yehFrS1wvY0p78JwKxyHjdBWFwBYA30yARUf3YpmOEE6czWe%2BvKoiL79gbHzg%3D%3D\"}]}\r\naccess-control-allow-origin: https://x-pay.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b862ee4da21a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":715,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T02:48:29.131091Z","times_seen":18577312,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/platform/deriva/favicon.ico?2.0.1789393870953","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:23.030Z","timestamp":1789483223030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /platform/deriva/favicon.ico?2.0.1789393870953 HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:23 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lc3O6aRsr5g4iRDhcsuPIvu4giwflMFMLAREgSyYvtafXEfX3RAeUpSDYd9ml3orxgyfNqOkDgi45ouYmbOnSL%2Beni17rnkZSp3%2F4Towcy2OZDSY4TH3XC%2B1NtSg\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:50:32 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fba8-423e\"\r\nage: 361\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b862dff9df1a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":4167,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"40748a69ee7b6046d0f2d05d258fc22e","sha1":"ee7076a41be081392a4cd3410fa366ce3ddf3494","sha256":"7147af87fb99381c58908e0d682b178b32de9c4d6bebe49ddb01ed51b76a2fc8","sha512":"45e61b22fd146dc5a892bab4f065000c04b02baa57864d98e4b130f694f9d724ca0a3d6dfafcfc80c0ce20bbae99cd580b7d2e43629993283ade6a9220155a6c","ssdeep":"96:MzxSAobKDCyLK0V33ZmGyQEq026PBW6gO3L:MzKuDPB33ZmTQEq0XsG3L","tlshash":"94724d02d119cafff861473449c396493515be94ab5b18556bf2ffb6b5be3250dc8300","first_seen":"2026-09-15T14:31:02.8561Z","last_seen":"2026-09-15T14:41:05.98135Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.x-pay.cyou/ws/a1dfa829-d408-4989-aada-1aacf86ac15b","fqdn":"api.x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:23.260Z","timestamp":1789483223260,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /ws/a1dfa829-d408-4989-aada-1aacf86ac15b HTTP/1.1\r\nHost: api.x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://x-pay.cyou\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: K1R0XxampYc2bDGUbPiRfQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 15 Sep 2026 14:40:28 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://x-pay.cyou\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: y8yR3tZ3qo1tEi+1PxsSRbYnesg=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tvsjj9wn8BsNScv%2BWY57S7oEvqDV9kQ5Ewoubkk8Fx0s6Cw%2FK7FbAuTceyzoQGwJpfFikXgqE7bcZGS1alKHAzb1w4lQtCd%2BHx0NDstBP4Vm5VpgDo6VeHsDaH0FXPW6Hg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a3b862f74a7ed90a-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":875,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T02:48:29.131091Z","times_seen":18577312,"resource_available":true,"data":null}},"time_used":8403,"timings":{"blocked":-1,"dns":3450,"connect":3468,"send":0,"wait":1459,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/headerSimulate-DWJl-Rb8.css","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:23.301Z","timestamp":1789483223301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /assets/headerSimulate-DWJl-Rb8.css HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:24 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JcSn7Dm89yVh5yxQop8z%2Bl6kerYk22njuuguIs7eFjgvbQ9E5MCm5SSm4p3HZsL9bye6Toh9AAxHd6IRfIgFW%2Fu7WF85oA%2FVmWURxWaAdsWh8E5KYCgDB5qoidY7\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:51:11 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fbcf-2de\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3b862e1aa3e1a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":734,"size_decoded":999,"mime_type":"text/css","magic":"ASCII text, with very long lines (733)","md5":"92ef223d6032baae3d36f11525ec83ef","sha1":"3f135a6c83518bc4be79daf88c3e5c4c224fb076","sha256":"be4d0eafcf94e268d6a92ea0beed6d98994969aa9171ef3ed63bfeaf9ce6b560","sha512":"7f00887ed52e7042095c497552a9ce26086822c943da8aeb02d4661ec62a2b769cface0c8ea3063ad0ab164696fc21ccc6b36aa0f4c76ad22c1801fee465bea7","ssdeep":"","tlshash":"10019cb9ba78d0237cb745c6351899dc9a007da79092dfa4d2231971c5dbea71712a00","first_seen":"2025-07-27T10:32:01.660004Z","last_seen":"2026-09-15T14:41:05.983155Z","times_seen":15,"resource_available":true,"data":null}},"time_used":1574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.x-pay.cyou/api/common/getMt5Amount?coin=xag","fqdn":"api.x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:25.315Z","timestamp":1789483225315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://x-pay.cyou\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkUIAliugZQZLN0d%2BvnFtxX5V9X%2FyFN7tZHb3r2e2fbgtL3fWLn2p54nAJ8Tro5Eb1AGTNVgTprkbmBSfAyXFA2QxrhIEmlfjUoPLwB4Lvm1tMuOG4SYV6VAKqcWoreWqw%3D%3D\"}]}\r\naccess-control-allow-origin: https://x-pay.cyou\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b862ee4da31a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":711,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T02:48:29.131091Z","times_seen":18577312,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T14:40:20.744Z","timestamp":1789483220744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:22 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 14 Sep 2026 13:51:11 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHg3eAunDWrF9XvL4obS2gtWfJ1vHI12cTR8pzHucRrbUyaEkVa5AQFqqMeB3gZjE%2FinRWV4DG%2FXLcTqgqb447PTAAzL3eRobK6ap%2B9P6xHskoG1uhG7YU%2FR29%2BT\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3b862d28e211a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4115,"size_decoded":2185,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1735)","md5":"d0e54256459190dc8e8ad74714bba562","sha1":"c1431fc3d51907905fe96366dd4d0ca06187b35f","sha256":"61e6921597f4a5020f8a6a7e6cc42828d61a9f7c8bc30a51ef321b7e455eef0a","sha512":"a7b316e56f1920523c09ae5b5b71c1991b7f3070f123880fa729983bf939b2e3c11917b9a16c5aab08ee16c990b6d271de23e1e3b3777ff1208f8bdbe893d9a1","ssdeep":"48:V222vX8hYYXupyp2oVLEEb93YhwMPIlAy2GM9g9mq/u/uE52nvK2S8+/2aqy2ZCA:oQ7Xu+zb93YhwjMaY/VlZ/t1DO0mUsGs","tlshash":"018120e34de1e8092365823acbebb0088b31655b96199d68b0cd20edcfd1f91c9d7775","first_seen":"2026-09-15T14:31:02.858414Z","last_seen":"2026-09-15T14:41:05.98691Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1365,"timings":{"blocked":-1,"dns":92,"connect":37,"send":0,"wait":1236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/assets/vendor-tAodn-mc.css","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:22.282Z","timestamp":1789483222282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /assets/vendor-tAodn-mc.css HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:22 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ubhdOanzF6UOMJVPdH8SLsh%2FboTy%2FTKNvDpcny6HDa2QZXxBprinczPq5DEDT%2FGhiHecmQeaKNgQCet0o3pRIp29iSnIIfnBgpfUg7n3P5YbGNvOyKrZWZhBqfl\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:51:11 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fbcf-1c0cf\"\r\nage: 360\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b862db58921a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114895,"size_decoded":42965,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"60e63a8455c7554eadecff143b4de662","sha1":"91bbccfe36f0d729c403f3a5dfcb1a0abb398fa6","sha256":"7fb2aa7f2f98edec15504dec43d94a8ead6475c72403f6954fbfdc26989a9151","sha512":"deb79fb6595e5c45626e1809bfe81f0d0ac56cf1a2d6f6b8498c408d94d781af99e8b537ee3b2727cdbbb59b3ddbe2c7f731946e6ba2802078978b72ae951a9b","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX3F1Ah5a4zZ:ZdN0rxmNH9yDWnCR","tlshash":"81b3c4a5e6c4a1fc6f27f2659b87a6d8f23cf661cd01caa4f105511d0ec7bf50223a29","first_seen":"2026-09-15T14:31:02.862826Z","last_seen":"2026-09-15T14:41:05.99363Z","times_seen":4,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/ac-chat.js?2.0.1789393870953","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:22.284Z","timestamp":1789483222284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /ac-chat.js?2.0.1789393870953 HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:22 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zq1A2%2Blc2rrekMqIDbDm1LNV2caTBYRwifmRcGddK8mJksMnrTjFyB6BWM%2F8%2BYAzI0pUtsn9azXwra8rNTxi%2Fr4Fajo2RmZQRgn3SId3dHW%2FQDf3vfVrmzYaUq9O\"}]}\r\nlast-modified: Mon, 14 Sep 2026 13:50:32 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6aa7fba8-979\"\r\nage: 365\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b862db58941a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2425,"size_decoded":1659,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"1876b5ed96b30caadd25965563a59434","sha1":"12ea862fa74ece93342e453697caec412e67938d","sha256":"de24d01af18e56461133a28c1f19bcd3c242ea7296ff07b722ad6d6fb5dea7bb","sha512":"c371ceeb7e78575b310225f270808992b7e036490ddf13bd9f1074f30edaa9a8e5fefe87ad939184442f9876220ed9c4f76539335bc84461d622234d6ebc5c23","ssdeep":"","tlshash":"1241afab47790224c20b11f72d4650943232a01faa0a1d3c79fc60d8ffaab7555e1ff9","first_seen":"2024-08-19T20:18:19.588895Z","last_seen":"2026-09-15T14:41:05.994541Z","times_seen":23,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-pay.cyou/platform/deriva/logo_180.png?2.0.1789393870953","fqdn":"x-pay.cyou","domain":"x-pay.cyou","tld":"cyou"},"ip":{"addr":"104.21.91.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x-pay.cyou/","date":"2026-09-15T14:40:23.028Z","timestamp":1789483223028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-pay.cyou","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 08:27:37 GMT","end":"Sun, 13 Dec 2026 08:27:36 GMT"},"fingerprint":{"sha1":"0A:CA:0A:1A:A5:28:D6:BA:B6:60:BA:4B:B5:60:45:46:08:44:4E:C4","sha256":"2C:4E:8F:D4:77:15:61:44:67:55:BE:DD:91:D3:8F:AE:85:EF:5F:8F:27:3F:D8:94:2E:85:95:84:B5:A3:F8:16"}}},"request":{"raw":"GET /platform/deriva/logo_180.png?2.0.1789393870953 HTTP/1.1\r\nHost: x-pay.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 14:40:24 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yc9t0WXIwzxlMHxx5k7wr0yKTCeq2jMdqIpvjPSdwI54wcOr9I79fGiKlqYvVujf%2FzjQ%2FpXUrQKUsN5zUGs4qiXutj2lpTnx8YB1kmA2JMpDgMoL%2FQo0n15mIkfJ\"}]}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b862dff9de1a54-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":737,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-09-21T00:56:33.600355Z","times_seen":47506,"resource_available":true,"data":null}},"time_used":1501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}