{"report_id":"e9d25eab-65e9-4879-b1fd-7bb7f649bb64","version":6,"status":"done","tags":[],"date":"2026-04-29T10:35:34Z","url":{"schema":"http","addr":"winrar.com.vn","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"104.21.61.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"winrar.com.vn/","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"title":"Tải WinRAR miễn phí, 32bit, 64bit mới nhất | Phần mềm nén, giải nén ZIP RAR","dom":{"size":27508,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (841)","md5":"c0195607fcccf7252bbfac524261da96","sha1":"1ac3b46055175203744fb587a75382b53c191205","sha256":"c17cca15eb3a9ec4a961defd4c6023ac043de7658b3b3e1c47c21483eff5f39e","sha512":"ea998d7273357f0dacbd1953390b09a47c784736556f2eaaff8fe2bcb75a3fb7505b5af439082c852d9552e5da6ea7a06bed2a66406b5f9df4c471a401652c4e","ssdeep":"768:1B+gQFkFVmYTF7Xgbbw1l9uVRyHKhcGyMGGJKyag4iJ:1dQSpT5Xg2lEXy0y6Kyag4iJ","tlshash":"c9c2f7278ee31c076148956dd76e720933ce640fc686ce557bec21bcdf80ae54962b8e","dom_hash":"domhash771f5bd9db12f62a83786daf426ec6f4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"winrar.com.vn","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"104.21.61.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-03T10:35:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"winrar.com.vn","ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2021-07-21T20:32:30Z","last_seen":"2025-04-30T07:46:40.148099Z","alert_count":0,"request_count":13,"received_data":311484,"sent_data":6598,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-26T22:25:05.471148Z","alert_count":0,"request_count":2,"received_data":779164,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"yandex.ru","ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2026-04-22T16:21:15.238456Z","alert_count":0,"request_count":2,"received_data":394623,"sent_data":7152,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2026-04-27T09:13:21.026338Z","alert_count":0,"request_count":6,"received_data":919043,"sent_data":2882,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.dmca.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-05-18","domain_rank":84234,"first_seen":"2012-06-18T23:24:47Z","last_seen":"2026-04-23T01:29:49.462355Z","alert_count":0,"request_count":2,"received_data":4777,"sent_data":927,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"winrar.com.vn/","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e73aecda17aef85b6300a100806ae6e9","sha1":"d15cc4385370d4aa893cfe76c3a0e0297f7e5f1d","sha256":"fde5d3a6db7a00495d7b38ab493e7aacaf2392a703794b1caf37563b50ef6afd","sha512":"31adb611ef56722e02428f23de9b2813a67748ea0b0f0e3d711203469908e8f1bbbcc9d58960dd654c6a6f5f70507c13a7575ac2b9d5a8de00afd1b93fbffc53","ssdeep":"","tlshash":"369000a82202808222a080200f0b23802230202880a280208820200cb0c08038a200fa","size":41,"data":"","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-04-29T11:47:25.958475Z","times_seen":12268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-209171683-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68958def8428cd27b96533fdd4e262b8","sha1":"703e6476e3e17785b130e2d9005b7df4002d53c4","sha256":"b20c6f99856bfc6c69edc76d967c9756d7efe6d2a26a97aebd73b1118b8bed82","sha512":"a4b50ce8d1a267c373658e4d42cc9496d5680ea2f9289b856e9b985f784f6035ff6568ee2f7431c73323a2cc02522926b2f55128254d01692f206265424dc1fc","ssdeep":"6144:SXY72UJEQxKZWbNftCn6dWDUEOtS8uKDwEvnYkQ:v7DxYefe+JsEC","tlshash":"2e7409cdb3da705253a3a478503f018bb27a7892f84cc899f185d8e42e7069a4277f7d","size":360223,"data":"","first_seen":"2026-04-29T10:35:39.605081Z","last_seen":"2026-04-29T10:35:39.605081Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HY009CMXEF\u0026cx=c\u0026gtm=4e64r1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d49b7f29dd65dc9be83afb5042b72c55","sha1":"34320ee304cf9ef6867ce994838bb957da8e9684","sha256":"02029191bd7211a6abab375377e95419796de719f69e0075552d79d89a998ee5","sha512":"d0e63530cb5da34fbd6805e18ec2a2503e0b1c002b5cc6e2227e33022c5ccf079ef4c1e8d736c1bdb6e22e05c810d1fedf853980c15a42857c1b6d0796650f7a","ssdeep":"6144:3XY72UJEpQ2AZWbi2pFtCAqdWDUEOtSS5KEiXBVB:Y76Q2ir2pFP8At","tlshash":"e09419cdb3d6745653a3f478903f018ba17b69a2b44cc89af185c8e42e7069a4277f7c","size":417707,"data":"","first_seen":"2026-04-29T10:35:39.600479Z","last_seen":"2026-04-29T10:35:39.600479Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1402ab5747f5c17f932b5dae9d7c35c","sha1":"d0934be5a2b2900f0aacfd08d769b583f0b79620","sha256":"cdb703c475fbee82da50bb9d6965c18d4042f3d0e6846c44a446a176adc201c8","sha512":"14870565966442936863dc0f0799899e468a085865e505560473f1925224ade306375357fd3d27c5b9d94af8dda63d9291b434939a672714294e17bfba97c5d8","ssdeep":"6144:rdZ3IBgzc6QJt+kzP0KO22jSk7H3NuzdWetdwylUnl2vUrN0ySEeFdtL0Hl18Pfx:fncJ/lC6","tlshash":"8084b59db1e2f0a143d761a5803f5a0bf23a6955780e9090e325e8d5bcb899f9133f3d","size":390318,"data":"","first_seen":"2026-04-29T10:35:39.60135Z","last_seen":"2026-04-29T10:35:39.60135Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","size":465,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-29T10:49:17.760248Z","times_seen":13377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9f8ecf8ffb2ca0592e642353b189cce","sha1":"7fac4e6f04b1ce9374b05e3a28df1fc4fe27805e","sha256":"9ec04fa68371adc0d2e33825014d9736274e1572ddab4845b7b7a0839423b689","sha512":"a918da86a0700acadee57dc40886d93c38d57fe3cf7923d1f35bee699b72256937c4c90c47b8bdf88dbac3116b1e2b8f9892fcb2a7e9fc7f706546d82d5a98bb","ssdeep":"","tlshash":"79c08c22f12120b20330802049080a89295101989a4a80f26a00301f22ec51786ae2ee","size":141,"data":"","first_seen":"2026-04-29T10:35:39.619888Z","last_seen":"2026-04-29T10:35:39.619888Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-29T12:35:16.100189Z","times_seen":823574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1304840/a37b6ddb6a7416be.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4dd3fd664bce6845a040a5ede1d2094c","sha1":"0900aa103dba5b20d34381ac11607c6cb1ba450e","sha256":"f4d3dd4b06514152ddcc48fb2904d9d78c74e1f881522df0e78983f1216e9607","sha512":"9a3068af3d273eaef32f8ef533749bfd8ab8f161ec36fad51307a2fb362da452e68a1b58b27906e0c3a57f292d2e67c3db4be68e3757c65cae3533915f96b92a","ssdeep":"96:PjwRO8i2n4XfmP5IWiwY6dFecXm5UiDJZmx7MfHmaXLbXTvTv1J0a2qo:PjC+2fP5IJwYEXR0AA/Hv1JzLo","tlshash":"5081e7bd3680337687c3159490bb950af53a0c21980ab1a2e15e80517d75fa360fffae","size":4157,"data":"","first_seen":"2026-04-29T08:13:28.716681Z","last_seen":"2026-04-29T12:19:07.462782Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1304840/ea52a36f268675af.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c17ed32353826d5d3498edd40a8ab94","sha1":"73d1b325f0a14f08803bde3011766334b7016079","sha256":"bd8f0673ea73e254e3f95667a23906f057440d71d905da9f63a712c6a12ecf56","sha512":"b5646cb5fc49611f340b7c3b4e3f0366d7879af28cbc2685be0729c215dd0ff1dbb94e3642bd08841e5d09d35edc95b52a7a919828c5ba6f7625842c53c1fab9","ssdeep":"3072:feogjYLyYHLMPCX7w4k3C5fTOaW4+UMWnWx8ncioJAGhXaf10KhNXu/WNdyinPac:feogZYrMPCX7w4k3C5fTOaW4+UMWnWx+","tlshash":"36f3c68db2e1b47142d7a0f5503f6a0af23a6459a4198094f72de9e16fb898f4137f3c","size":160668,"data":"","first_seen":"2026-04-29T08:13:28.718867Z","last_seen":"2026-04-29T12:19:07.48081Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/sandbox%20eval%20code","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-29T12:35:16.098823Z","times_seen":825194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","size":33703,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-29T12:19:07.479776Z","times_seen":24340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1304840/9339a77d133608bc.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ae3b7a1a163114a91886535772a9fa8","sha1":"79349e980d254b494b7b2186cc226185bb98eb08","sha256":"37481f6a18637ea86f84749714131e6c505e6ee33ee5c98b45b085703898eb54","sha512":"93000ab5c0202dd37d8d36dd5b282970fa414f1cc2701a1d6b30d9cb752961cb29c4a9da680fb13a4b46dcaf13cc8a85878e441d37496a118a37d24ea502790f","ssdeep":"12288:wMsrUvnhBcnzBUu+zoRdg1Yig5J/YaxaHBpbyZLxyCaiBQZB:wMsrU1uuoRi1fg5JQaxaHBpbyZLxyCah","tlshash":"f5e4d78ef5e1b06142e7a0f9803f160ff23a791555098094f62ae8e57eb898e5137f3d","size":679895,"data":"","first_seen":"2026-04-29T08:13:28.712618Z","last_seen":"2026-04-29T12:19:07.468979Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57a47bf2ef8ec0580504427339f163a4","sha1":"e4cea51cae3713c23035991509d17786e8537b5f","sha256":"d67bd9be4a3382aa733c9ef195253e01724e65734285e84e5e0957057b58c31e","sha512":"be88de4af4f736d4d09ccfd9ba6ae81de95cb6db9d9a1ea8617b0cf0bc581d2378716d994680600a0958b3fd4458a1877f358f35b1e9592a642510fc5d1c6cba","ssdeep":"","tlshash":"56e0e52998eb0a384cf67a485079da7934f878a4aaa2d057525cc869ca39fc54c14aec","size":424,"data":"","first_seen":"2026-04-29T10:35:39.622345Z","last_seen":"2026-04-29T10:35:39.622345Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"93a0f158a06a88c21e32ebc07e035503","sha1":"5d532e76c010fc7c978dce3d88948eb01e570757","sha256":"a1a3893e766b6aa26b0e627790a94c9c1f841c59afebf1609736aa8e61c5b656","sha512":"bceeee6d0b4cb33bde7403d9969d4f71c34c733802960d85fb06e043c1b480d45a8662c71f885228bdc4b2e206c66bd75786e4f60b1c64621c75eafb69e606e6","ssdeep":"","tlshash":"94c02bcc350a0c7186f727008b3ff60cb4023214d4e59a31494933044d20e1bdf54804","size":155,"data":"","first_seen":"2026-04-29T10:35:39.623204Z","last_seen":"2026-04-29T10:35:39.623204Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-b3f8aa7d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfb34149de2d4fa1703203ba3bb26115","sha1":"f6aeb7d5cda7f8cf0e969524b30e3c39efb4736c","sha256":"b370e738d148cee40305e9bb53a2a8ab7337f7c2fea0b33388dfb8ec32997df8","sha512":"b075560a6418993a12675bed5ac5f1c86b7f59bd5b684a81b7e8ce7b299fe8cd4f6fbdee1a82fbf87d299b5c3aeace0e2b6cde9441053d9bd4d653c40f470cbb","ssdeep":"192:emKFHNNSZkrXmIldQs+mLXk5y4OYq7YLYIPZqb4MVA9Xmd:elFn8CXys+6krqcsp8My9X0","tlshash":"de12d9f532a1b8c412f669c1085f557b01ba7e07b90e255e872699927d240ce60f3fef","size":9232,"data":"","first_seen":"2026-04-24T11:53:44.770975Z","last_seen":"2026-04-29T12:19:07.462042Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"winrar.com.vn/images/install/install-winrar-3.png","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:12.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET /images/install/install-winrar-3.png HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 76783\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 06 May 2026 10:35:13 GMT\r\nlast-modified: Thu, 15 Jul 2021 14:41:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NDEzcR9Hvrde8N7lCVix2MMouWM1U1SiPkm43De8A%2BM%2BukujRtMXGC%2FsoOdqkCg0NlJM5d6ttANgNA2e%2B%2FCzg4YrXka6Wfpyry9oNQJ4%2B3%2B7HW9jhXYLR%2F%2BTpozPVJh1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3da89b9c59b4f7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 322, 8-bit/color RGBA, non-interlaced","md5":"5e9cdb381b16b9c9630104d0374004a3","sha1":"2a8214daf19bd76f78645c60ffb3d878a2508cd9","sha256":"25491e2ba6a125b1c963ebce158466532532d9cbdc053f5cbf9b4e9e9aaed849","sha512":"c1dafdb88c62fcb2ee5c39f97d035d7c5f42b919b4cf3b97fa0a9b486fe0fd3b0a6d56d29b00661c159829f780b85990dbf92f870a99d2c50146d649e0ff0a97","ssdeep":"1536:GLjGXnGvZtr2k0rXqvAApFu7o7p85PP46ANe4nVwTBfVin:+jGXn2ZtArX4RFypPzANe4nq9do","tlshash":"ec7302e73c4c34aa841e18d774f137450fcf6649b6e8f8d6d3b092256af578c8e2a284","first_seen":"2026-04-29T10:35:39.598476Z","last_seen":"2026-04-29T10:35:39.598476Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":939,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/images/button_download_blank.png","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:13.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET /images/button_download_blank.png HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 1748\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 06 May 2026 10:35:13 GMT\r\nlast-modified: Thu, 15 Jul 2021 10:22:36 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ppt%2F7%2F1gyPLAISf7x%2FH4vFPy4P49KZp9QDfFljImtBm01VMtCresbKm8AwNqCnqZg%2FD8CKs3cOeftrrLi6eYR4uYzgbQKwqIG6Ncghi5fAH4370rtBn9DddZeffmtulk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3da8a0ccb4b4f7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1748,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 76, 8-bit colormap, non-interlaced","md5":"c339ca731734c09dd596cf54df16d75d","sha1":"b643cad08fbd95545c4d0d9d904fdcdb48f166ce","sha256":"bbe1eab49d3390c8a8525ad668cbb59dbbeae3657215eab41599934d81ad345e","sha512":"3c5e394e78eb380b9dc635c50c30ea49631317dec16498658e681875af4534890c11c68540fca4c257d772926a66e94a6d2b237438b5b4706d8a5520b1508b1d","ssdeep":"","tlshash":"ce311aefd3c32e14ca8e41992d5c1b1ca47634fc8aaadc6505ba150c7d314d8cf29f6a","first_seen":"2023-05-25T00:49:52Z","last_seen":"2026-04-29T10:35:39.599391Z","times_seen":54,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":678,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HY009CMXEF\u0026cx=c\u0026gtm=4e64r1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:13.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-HY009CMXEF\u0026cx=c\u0026gtm=4e64r1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 29 Apr 2026 10:35:13 GMT\r\nexpires: Wed, 29 Apr 2026 10:35:13 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143799\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417707,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"d49b7f29dd65dc9be83afb5042b72c55","sha1":"34320ee304cf9ef6867ce994838bb957da8e9684","sha256":"02029191bd7211a6abab375377e95419796de719f69e0075552d79d89a998ee5","sha512":"d0e63530cb5da34fbd6805e18ec2a2503e0b1c002b5cc6e2227e33022c5ccf079ef4c1e8d736c1bdb6e22e05c810d1fedf853980c15a42857c1b6d0796650f7a","ssdeep":"6144:3XY72UJEpQ2AZWbi2pFtCAqdWDUEOtSS5KEiXBVB:Y76Q2ir2pFP8At","tlshash":"e09419cdb3d6745653a3f478903f018ba17b69a2b44cc89af185c8e42e7069a4277f7c","first_seen":"2026-04-29T10:35:39.600479Z","last_seen":"2026-04-29T10:35:39.600479Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:13.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 06 Feb 2026 06:58:08 GMT","end":"Thu, 06 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:59:19:A6:7A:7A:52:5E:F5:B8:9A:A0:2C:24:3D:1C:0E:39:E3:EF","sha256":"00:4B:73:AB:C7:08:25:68:A0:71:82:92:46:23:A2:69:73:FB:7F:4A:B4:ED:30:A5:F0:22:C3:FA:17:C3:55:EB"}}},"request":{"raw":"GET /ads/system/context.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-content-type-options: nosniff\r\nx-yandex-req-id: 1777458914107803-6122471871096148128-balancer-l7leveler-kubr-yp-klg-196-BAL\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\ncache-control: private, max-age=3600\r\ncontent-encoding: br\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\ncontent-type: text/javascript; charset=utf-8\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nexpires: Wed, 29 Apr 2026 11:35:14 GMT\r\nset-cookie: pi=z3dVVMb5MZciUmUVm9ne3n3MdyGefdA4AHiRIaeJ5I/9DR2EPvTaVQiWSouVCvt5HALkxpTRDxwPEVWz/yPJ2RdZLuo=; Expires=Fri, 28-Apr-2028 10:35:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None; Partitioned\ni=IAkxC1uUgp1WONzn7KcpXHTx4IMfMpgGax4hhZbBNS1cm/4vy23nJnEsN2AZegP658Rgvc+htb/ztl9QgbPCKfjOoWk=; Expires=Fri, 28-Apr-2028 10:35:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=4961481281777458914; Expires=Fri, 28-Apr-2028 10:35:14 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=1529802451777458914; Path=/; Domain=.yandex.ru; Expires=Thu, 29 Apr 2027 10:35:14 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YOK9x88GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Thu, 03 Jun 2027 10:35:14 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\netag: \"19ee1c845434cb5f54d56c09363196e5-1304840\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":390318,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"d1402ab5747f5c17f932b5dae9d7c35c","sha1":"d0934be5a2b2900f0aacfd08d769b583f0b79620","sha256":"cdb703c475fbee82da50bb9d6965c18d4042f3d0e6846c44a446a176adc201c8","sha512":"14870565966442936863dc0f0799899e468a085865e505560473f1925224ade306375357fd3d27c5b9d94af8dda63d9291b434939a672714294e17bfba97c5d8","ssdeep":"6144:rdZ3IBgzc6QJt+kzP0KO22jSk7H3NuzdWetdwylUnl2vUrN0ySEeFdtL0Hl18Pfx:fncJ/lC6","tlshash":"8084b59db1e2f0a143d761a5803f5a0bf23a6955780e9090e325e8d5bcb899f9133f3d","first_seen":"2026-04-29T10:35:39.60135Z","last_seen":"2026-04-29T10:35:39.60135Z","times_seen":1,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":118,"dns":0,"connect":45,"send":0,"wait":57,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1304840/9339a77d133608bc.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:14.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1304840/9339a77d133608bc.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nOrigin: https://winrar.com.vn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 29 Apr 2026 10:35:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 132757\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncontent-encoding: br\r\netag: \"249ac80733c6a4f3d3b7fef4e522e7e3\"\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 28 Apr 2026 15:53:05 GMT\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=946708560\r\nexpires: Fri, 28 Apr 2056 17:08:42 GMT\r\nx-strm-log-split: 9\r\nx-request-id: 7118ee2a84c7103e\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":679895,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"6ae3b7a1a163114a91886535772a9fa8","sha1":"79349e980d254b494b7b2186cc226185bb98eb08","sha256":"37481f6a18637ea86f84749714131e6c505e6ee33ee5c98b45b085703898eb54","sha512":"93000ab5c0202dd37d8d36dd5b282970fa414f1cc2701a1d6b30d9cb752961cb29c4a9da680fb13a4b46dcaf13cc8a85878e441d37496a118a37d24ea502790f","ssdeep":"12288:wMsrUvnhBcnzBUu+zoRdg1Yig5J/YaxaHBpbyZLxyCaiBQZB:wMsrU1uuoRi1fg5JQaxaHBpbyZLxyCah","tlshash":"f5e4d78ef5e1b06142e7a0f9803f160ff23a791555098094f62ae8e57eb898e5137f3d","first_seen":"2026-04-29T08:13:28.712618Z","last_seen":"2026-04-29T12:19:07.468979Z","times_seen":13,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":84,"dns":6,"connect":35,"send":0,"wait":15,"receive":23,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:14.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /safeframe-bundles/0.83/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nOrigin: https://winrar.com.vn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 29 Apr 2026 10:35:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 8878\r\nlast-modified: Wed, 03 Nov 2021 13:42:58 GMT\r\nvary: Accept-Encoding\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nexpires: Fri, 28 Apr 2056 16:42:51 GMT\r\ncache-control: public, max-age=946708560\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\netag: \"f80882bf67cf261aa08d636da095149a\"\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-strm-log-split: 7\r\nx-request-id: 51583543dfb0a446\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33703,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33703), with no line terminators","md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-29T12:19:07.479776Z","times_seen":24340,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":87,"dns":0,"connect":36,"send":0,"wait":34,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/css/ck5782.css?20170725","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:12.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET /css/ck5782.css?20170725 HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 419\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 06 May 2026 10:35:13 GMT\r\nlast-modified: Wed, 26 Jul 2017 00:49:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x31Lww7dwS5UkfS5bShkvpDNE0C6opjjEcsmdgDZyua%2FxRtd7bmXZLSLk8qoQdJXl2xCyH8HOiapKZeah2%2BFExOg%2FMMK9TvudTZ4uo6zYUdp29V3ggS04UQTbZ772qPZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f3da89b9c54b4f7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1386,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"352147624195b48fd6d3b1ca81f38d99","sha1":"ae3630c9348407fd680e4833cfc8eddc0aa8668e","sha256":"e2e4015215859bb0447d8ac99a3cad7bdb6e750d955391f62b85a5e75082f599","sha512":"1f42037c4cf71baa3a9eb8ef409c9ee503feea669b5d4836485f1518aab92194e74624b868ebc01e7b9a287ca98c389e563a047fbef8ba71318ec759de041dd2","ssdeep":"","tlshash":"d72102e3af724905b51680e23652e64177558843941bc9357ed0b46cffc42d8183238d","first_seen":"2024-08-19T21:35:06.147599Z","last_seen":"2026-04-29T10:35:39.603366Z","times_seen":2,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/images/logo-winrar.png","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:12.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET /images/logo-winrar.png HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 19418\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 06 May 2026 10:35:13 GMT\r\nlast-modified: Wed, 14 Jul 2021 16:36:37 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NIXw16L7ktCHDtDTwpcTtoaPkbDBn5wcuY7uxpgKO2xgM%2FtDDqBUCYwv95m9%2Fl2q4iz%2BfJOHBogHVnCyioLcYW%2Fy8vznJv3ujklbdL5QQrBfkRxibwZ8Zf4VqzI8vSRa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3da89b9c55b4f7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 66, 8-bit/color RGBA, non-interlaced","md5":"030bb5bef6c75714853a7832e770bdab","sha1":"cab68c10bf7ffb925bb35b4274cdbf2284344333","sha256":"4918d7bf75b352fe71f4256ceff150a321f1e8b722adc04101554acbb8c2a163","sha512":"2b40a61040f52c013f2af01bfcaee277f3c49f8ab5fd5e5172a2aea217da36110e87d274c286e8fe942fc76e2f667e1c45717e8f7c2d1ecad85b1ee69c302d0f","ssdeep":"384:/XE054J2U7Cj233ejJTKEg1lpAikervMzMbDKjwbVaaGogJnFadCm:v35CTCj2nWTMbBrvhfOvTIdZ","tlshash":"7392d1901e72db1fc727c4503f5b061cd668b77caab84e4a0d71fe6bd8a04ab6941300","first_seen":"2026-04-29T10:35:39.604225Z","last_seen":"2026-04-29T10:35:39.604225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-209171683-3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:12.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=UA-209171683-3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 29 Apr 2026 10:35:12 GMT\r\nexpires: Wed, 29 Apr 2026 10:35:12 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 29 Apr 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 124544\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":360223,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"68958def8428cd27b96533fdd4e262b8","sha1":"703e6476e3e17785b130e2d9005b7df4002d53c4","sha256":"b20c6f99856bfc6c69edc76d967c9756d7efe6d2a26a97aebd73b1118b8bed82","sha512":"a4b50ce8d1a267c373658e4d42cc9496d5680ea2f9289b856e9b985f784f6035ff6568ee2f7431c73323a2cc02522926b2f55128254d01692f206265424dc1fc","ssdeep":"6144:SXY72UJEQxKZWbNftCn6dWDUEOtS8uKDwEvnYkQ:v7DxYefe+JsEC","tlshash":"2e7409cdb3da705253a3a478503f018bb27a7892f84cc899f185d8e42e7069a4277f7d","first_seen":"2026-04-29T10:35:39.605081Z","last_seen":"2026-04-29T10:35:39.605081Z","times_seen":1,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":47,"dns":0,"connect":7,"send":0,"wait":26,"receive":23,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/images/favicon.ico","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:13.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960; _ga_HY009CMXEF=GS2.1.s1777458913$o1$g0$t1777458913$j60$l0$h0; _ga=GA1.1.1316764549.1777458914\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:14 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 06 May 2026 10:35:14 GMT\r\nlast-modified: Wed, 14 Jul 2021 15:51:42 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06uWdCcqqBMCv1lW3iV%2FBVO9McEOXAjbhSKrbhtySe5JyCOb%2BQJd8x48KPWejozeIHyQ7w4sRnGDDdOz92r6s0VsWoej0KrW4FZljPiB%2FthvXciZnET7DhvDvk3ehhSi\"}]}\r\ncf-ray: 9f3da8a45cefb4f7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2550,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 8 bits/pixel, 16x16, 32 bits/pixel","md5":"faf4ee72a7239c094490a9a4863b697b","sha1":"e4b64ad013bc9d733e8b5b6f98c5c25606175792","sha256":"7aec4a643d6846610958cd1796b6c8ed6c120bff4c3a507a8f2ed5a73e9ec6d7","sha512":"bff0920c06a33497f23e0daf3651a69cc17e9bf7aaa5c8b4f059560a8396e2a97659f62d8866684512afdfe0be615ba9fcbb4cf10d8f5fceb7c667ff368543ad","ssdeep":"","tlshash":"a05110060b02c98ed6d23db4eca4eb276954dea315df448522527470073e3a12f0faa8","first_seen":"2023-05-25T00:49:52Z","last_seen":"2026-04-29T10:35:39.60587Z","times_seen":63,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-b3f8aa7d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:14.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs-b3f8aa7d.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nOrigin: https://winrar.com.vn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 29 Apr 2026 10:35:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3884\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ncontent-encoding: br\r\nx-robots-tag: noindex, noarchive, nofollow\r\ntiming-allow-origin: *\r\nexpires: Fri, 28 Apr 2056 17:08:40 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncache-control: public, max-age=946708560\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 20 Apr 2026 15:11:46 GMT\r\netag: \"28da4b584da2cf67755881ebbcf6d298\"\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 1\r\nx-request-id: 48aca9d55dabb61d\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9232,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9202)","md5":"bfb34149de2d4fa1703203ba3bb26115","sha1":"f6aeb7d5cda7f8cf0e969524b30e3c39efb4736c","sha256":"b370e738d148cee40305e9bb53a2a8ab7337f7c2fea0b33388dfb8ec32997df8","sha512":"b075560a6418993a12675bed5ac5f1c86b7f59bd5b684a81b7e8ce7b299fe8cd4f6fbdee1a82fbf87d299b5c3aeace0e2b6cde9441053d9bd4d653c40f470cbb","ssdeep":"192:emKFHNNSZkrXmIldQs+mLXk5y4OYq7YLYIPZqb4MVA9Xmd:elFn8CXys+6krqcsp8My9X0","tlshash":"de12d9f532a1b8c412f669c1085f557b01ba7e07b90e255e872699927d240ce60f3fef","first_seen":"2026-04-24T11:53:44.770975Z","last_seen":"2026-04-29T12:19:07.462042Z","times_seen":41,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":72,"dns":10,"connect":17,"send":0,"wait":14,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1304840/ea52a36f268675af.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:14.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1304840/ea52a36f268675af.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nOrigin: https://winrar.com.vn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 29 Apr 2026 10:35:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 32495\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"6ef2ed42db80efe3992af45a7ceb4891\"\r\nlast-modified: Tue, 28 Apr 2026 15:53:05 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncache-control: public, max-age=946708560\r\nvary: Accept-Encoding\r\nexpires: Fri, 28 Apr 2056 17:08:52 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-strm-log-split: 0\r\nx-request-id: 6b842d1212b84e74\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160668,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"7c17ed32353826d5d3498edd40a8ab94","sha1":"73d1b325f0a14f08803bde3011766334b7016079","sha256":"bd8f0673ea73e254e3f95667a23906f057440d71d905da9f63a712c6a12ecf56","sha512":"b5646cb5fc49611f340b7c3b4e3f0366d7879af28cbc2685be0729c215dd0ff1dbb94e3642bd08841e5d09d35edc95b52a7a919828c5ba6f7625842c53c1fab9","ssdeep":"3072:feogjYLyYHLMPCX7w4k3C5fTOaW4+UMWnWx8ncioJAGhXaf10KhNXu/WNdyinPac:feogZYrMPCX7w4k3C5fTOaW4+UMWnWx+","tlshash":"36f3c68db2e1b47142d7a0f5503f6a0af23a6459a4198094f72de9e16fb898f4137f3c","first_seen":"2026-04-29T08:13:28.718867Z","last_seen":"2026-04-29T12:19:07.48081Z","times_seen":13,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":88,"dns":4,"connect":35,"send":0,"wait":33,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-29T10:35:11.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.3.33\r\nset-cookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bLoagYt9IQiQwZv1vspddBqYxXlejUKq19mw0ERrhLQJuxjc6OB4Gs8yFcvbDBgHj2%2FZdB05WIpUWx25NKmYSMjUnwA5Rmo0jHBzZ5JDkB4P28Kd9v0RUxl6%2BR8y38gJ\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f3da89649320afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":26959,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (841), with CRLF, LF line terminators","md5":"b258b47e9f3f20d46bfe413948798d50","sha1":"734278fd4fd48211856610a6460c29f69f9efaa1","sha256":"5b6e31d06832c06d3078ff71d98bfc9f71c0a0e8956e820f3128ec2fb115ef70","sha512":"63221d2babaa1595cd5d539339aeabe6c6d822f75d742c5598e688dcb8d6dae6a53826890dc463c33257b3478b5e61ba26893b204e87d8a846d92e1343f25e40","ssdeep":"768:canC3wgbkw1M9iY+yHKh48y/wNnsBpQ4h:cxwx2MoHyCy+sBpQ4h","tlshash":"19c2e715cad11c071279da3dd3666204fbca541fd782c6917afc20abefb09a48952fcd","first_seen":"2026-04-29T10:35:39.607829Z","last_seen":"2026-04-29T10:35:39.607829Z","times_seen":1,"resource_available":true,"data":null}},"time_used":754,"timings":{"blocked":31,"dns":10,"connect":1,"send":0,"wait":692,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/css/lc_switch5782.css?20170725","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:12.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET /css/lc_switch5782.css?20170725 HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:13 GMT\r\ncontent-type: text/css\r\ncontent-length: 594\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 06 May 2026 10:35:13 GMT\r\nlast-modified: Thu, 26 Apr 2018 01:08:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6gNUiG7dq2ZEI1UIFolul6dM5U%2B8EFaDAVIhPvjmWcwXGco1yC9HYV7bGesj9somSNx%2F3ebZ5daick7euUyYLv0rNVNH0j9eLPPqLCLqp2czbO7uzzDRaXEpBrWNgtB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f3da89b9c53b4f7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1868,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3fdca2772926da5642a3b56e7c8b058a","sha1":"089fc6ea38aad417767cfedd3ad193b954a7766c","sha256":"4e6ceb3b57e4123cb6c2bceaad8c20e4abfd4eda551c053bc0990d3a730f5663","sha512":"2ea56ce95896888486924f749ebc9974ab0e45c55cbcacdaa3ea90d56b71dec327050a341e84c350d27f0eb6dca670783249bb6b1274562e4f59a8994e379786","ssdeep":"","tlshash":"ec31e17555613b40ac13c3dcefca23831a1ac44b791e0e8e7d573d1d8baa8946532f49","first_seen":"2024-08-19T21:35:06.146053Z","last_seen":"2026-04-29T10:35:39.608774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/images/checkmark.png","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:13.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET /images/checkmark.png HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 29 Apr 2026 10:35:14 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5KUYCo9zYLIdn%2Fp23fztCnbDO0RR8FAqNSgAUfxDTO3ohYCip945Ij4iZdox3fY0yG%2FJW%2FsxRwUuDoMP%2Faq%2FRPxXMjltX1i4wdoY9jjDnOprEVQmy%2Bddh8OHO55Z4sk\"}]}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3da8a0ccb3b4f7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-04-29T12:20:37.580051Z","times_seen":43295,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":707,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/dmca-badge-w100-5x1-07.png?ID=1f35e7b3-1645-4d7e-95af-6c20ceedc569","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:12.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 18:02:24 GMT","end":"Sat, 04 Jul 2026 18:02:23 GMT"},"fingerprint":{"sha1":"2D:61:6B:E2:1F:84:60:5D:3B:D2:33:18:D8:BA:56:38:DC:47:29:43","sha256":"3B:55:23:65:A9:74:AE:45:C4:76:18:C5:04:CB:13:36:94:A3:98:2C:4D:13:F6:B1:B9:6D:6D:17:7A:28:CD:C2"}}},"request":{"raw":"GET /Badges/dmca-badge-w100-5x1-07.png?ID=1f35e7b3-1645-4d7e-95af-6c20ceedc569 HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2878\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=31536000\r\netag: \"5d86a43aace6d11:0\"\r\nlast-modified: Mon, 25 Jul 2016 19:39:16 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/24/2025 15:33:08\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/dmca-badge-w100-5x1-07.png?ID=4a86b203-b0ea-4d01-b73e-d11a622d856f\u003e; rel=\"canonical\"\r\ncdn-requestid: e516371e0396f79d941e02774724b8f3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 20, 8-bit/color RGBA, interlaced","md5":"0a733368ded236a0ba300f2f1b90241e","sha1":"fc6ccfc72ba7198ae83b83c0ad2f211417333267","sha256":"5c58e558a0a8263fa1f635c56daf2ef0ba79f7352fcd4bd19b27a4e972d0410f","sha512":"9b3517961a247fbd6839c8e5b15dc62a09ca9f793b7a18a4c0fed897ff11cdd150876edb70777ce8ad748b0c5f73cd594faa70090b3d1f3962b910a38fc973c9","ssdeep":"","tlshash":"91514b5c43031310201c7af352660966a4de56cd1abc6e70853ab43fd3212abb224a0a","first_seen":"2023-05-05T23:36:20Z","last_seen":"2026-04-29T10:35:39.610107Z","times_seen":78,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":51,"dns":52,"connect":4,"send":0,"wait":2,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:12.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 18:02:24 GMT","end":"Sat, 04 Jul 2026 18:02:23 GMT"},"fingerprint":{"sha1":"2D:61:6B:E2:1F:84:60:5D:3B:D2:33:18:D8:BA:56:38:DC:47:29:43","sha256":"3B:55:23:65:A9:74:AE:45:C4:76:18:C5:04:CB:13:36:94:A3:98:2C:4D:13:F6:B1:B9:6D:6D:17:7A:28:CD:C2"}}},"request":{"raw":"GET /Badges/DMCABadgeHelper.min.js HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:12 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\netag: \"26b181f16d28d51:0\"\r\nlast-modified: Fri, 21 Jun 2019 20:14:34 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:10\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/DMCABadgeHelper.min.js\u003e; rel=\"canonical\"\r\ncdn-requestid: 779f38a1eca5c0b46c42ee03358a0dfc\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":465,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-29T10:49:17.760248Z","times_seen":13377,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":50,"dns":52,"connect":1,"send":0,"wait":4,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1304840/a37b6ddb6a7416be.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:14.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1304840/a37b6ddb6a7416be.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nOrigin: https://winrar.com.vn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 29 Apr 2026 10:35:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1761\r\ntiming-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nvary: Accept-Encoding\r\nexpires: Fri, 28 Apr 2056 17:08:42 GMT\r\ncache-control: public, max-age=946708560\r\naccess-control-allow-origin: *\r\netag: \"efaa7b3c2e2433eeb164cfcfbf4388fd\"\r\nx-robots-tag: noindex, noarchive, nofollow\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nlast-modified: Tue, 28 Apr 2026 15:53:05 GMT\r\ncontent-encoding: br\r\nx-strm-log-split: 2\r\nx-request-id: d227e283c234f858\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4157,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4118)","md5":"4dd3fd664bce6845a040a5ede1d2094c","sha1":"0900aa103dba5b20d34381ac11607c6cb1ba450e","sha256":"f4d3dd4b06514152ddcc48fb2904d9d78c74e1f881522df0e78983f1216e9607","sha512":"9a3068af3d273eaef32f8ef533749bfd8ab8f161ec36fad51307a2fb362da452e68a1b58b27906e0c3a57f292d2e67c3db4be68e3757c65cae3533915f96b92a","ssdeep":"96:PjwRO8i2n4XfmP5IWiwY6dFecXm5UiDJZmx7MfHmaXLbXTvTv1J0a2qo:PjC+2fP5IJwYEXR0AA/Hv1JzLo","tlshash":"5081e7bd3680337687c3159490bb950af53a0c21980ab1a2e15e80517d75fa360fffae","first_seen":"2026-04-29T08:13:28.716681Z","last_seen":"2026-04-29T12:19:07.462782Z","times_seen":13,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":78,"dns":14,"connect":30,"send":0,"wait":14,"receive":2,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/images/rar-archive-8_86.png","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:12.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET /images/rar-archive-8_86.png HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 8666\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 06 May 2026 10:35:13 GMT\r\nlast-modified: Thu, 15 Jul 2021 16:21:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rovGici5uCGf15OnNYVJGYvgZFit4ZpDuMtzFUWS0IFJ9J7nhCAFLYizoYQqGEEJwCa1F962Wc2bnY6wZS4DqUygQi2XpZBLb%2FIxMNJew9AJddSudHyNentoiFqbHt5t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3da89b9c56b4f7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 105, 8-bit colormap, non-interlaced","md5":"bd8d683a8b32411ddad7931b87e800f4","sha1":"6ba0a40b80c808d6b603b52d4b01053d445e9fb7","sha256":"67c2bf740e986903992254bef00fc7677557cda69a8e5a3a822250d1757a9120","sha512":"55b9b36edb4cbd7d3f0eea9c6a398805d4de211a7cb5eeacd6f52f6fdf21098bbfdf9dfa7e7a90098a133b9bd3f56a4a8936c593b41655e127e559afa4a336b8","ssdeep":"192:DbFEDduR4NMThY5dqHiXQb+fgRdhwSuSA7V:DbihtMFY5dYpHwSuPV","tlshash":"01029047e1cc2dd0d2a0fec67698c90ef7351c194492d5de24c6ba65a9fa2721d800d9","first_seen":"2023-05-25T00:49:51Z","last_seen":"2026-04-29T10:35:39.611973Z","times_seen":8,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/images/install/install-winrar-5.png","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:12.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET /images/install/install-winrar-5.png HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 56508\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 06 May 2026 10:35:13 GMT\r\nlast-modified: Thu, 15 Jul 2021 14:41:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sibBkDqRaA8Lprc%2BLCM19P1vy4KNyzprNETfRneSkjMQWTviGqvXAKSfvvKiQWx%2FzJQPL9kDGnZQnv3Kc43Jtc179Sgk9C%2BvCxzHdS7jeOJ8gJHD16Z7uGXLs%2BnvB43P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3da89b9c5bb4f7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56508,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 306, 8-bit/color RGBA, non-interlaced","md5":"6b2ba31d15aa724c8350b667eb15cbde","sha1":"339cce83b21525932be7467b7a438781dd291393","sha256":"a67794a7af145825beb1d45d5698bf499c889dbad51e7df7af8e42f3ae12d4fc","sha512":"4c7eb460b6eebf355f9e0a04b73ba78820d265daa3fdc912be0abef202664b7ef8f209b9bc154f2086d21e3980d73c58f5282242858f2b69d448378b97ea5734","ssdeep":"1536:nKbQZ8jrlvuKEgc8G3+3/V+2E6VOzxQU1FVFzpdVL4Xp:nKblPlvu+3zmz+aVF1d+","tlshash":"f04302d3dc8f49b4904e1ab1c1d6822a55fefd5c18c5bb78cd7a13e4141b60aeccba22","first_seen":"2026-04-29T10:35:39.613306Z","last_seen":"2026-04-29T10:35:39.613306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/meta/7080777?target-ref=https%3A%2F%2Fwinrar.com.vn%2F\u0026pcode-version=1304840\u0026pcodever=1304840\u0026comboblock-unencoded-vast=1\u0026ad-session-id=463011777458914394\u0026target-id=75305117\u0026pcode-test-ids=918197%2C0%2C5%3B1387855%2C0%2C68%3B1548369%2C0%2C30%3B1519497%2C0%2C21%3B1471934%2C0%2C88%3B1534006%2C0%2C60%3B1538640%2C0%2C41%3B1549205%2C0%2C43%3B1513559%2C0%2C52%3B1543959%2C0%2C15%3B1551119%2C0%2C21%3B1529972%2C0%2C38%3B1553597%2C0%2C4%3B1485711%2C0%2C35%3B1534167%2C0%2C82%3B1513548%2C0%2C61%3B1550660%2C0%2C2\u0026csrf-token=29cdf22d88008d4fb1402058a1aa1e98a57f9249%3A1777458914\u0026pcode-uid=8302388311777458914\u0026pcode-flags-map=eJyFldGO2zYQRf%2FFz9uAFElJ1BtXHNnE0qRCUnLcohi4qVO0dTdB4hYpgv33QpZjVFpAfjJgcA6Hd%2B5cfVvtVWxjUo8Wegir6qdvq38Op7%2BPq2pF35RZ%2BYYyWbLVw%2Bp8%2FHI2vw5%2FC0FlTlcvPz%2BsehVxLMYeQjTeTQmM0LzMJ9WMF1yUt2rr11h7l8Al1F1QyXiHLYQaXJqyppSsIHl2oWgTLw1oiCn4PcK7BMEpi3UAlUwPqDR2EQLW1kdA6Ofo49dPEzjnMivE6uXhzpHs9ooAtbJ1Z1UCDPC2g5hwC2njNTY%2B4C6otoWAXbDLFwsiuLhQ3wZ8tKp%2BQmtiwtqaQSCj41QTIjNWSi6qsiyKLKOkYkSSPCO5qCgRnOdSlBWjMpdFLljFCKckY4RVUlJOiCgqSgmhNCtIxWhJOcmL4RjNCCkzWlHCCedCZhXLKMt4OfMCLyjJRi8ordFs1RpwrayFsEfj0EEX%2FDAas3bLTy%2BpJPw7yLg1Dj%2BDG5TFVgW1hQQhXuTUJqZgHrs099traC5luTzI4ch4L7iLj9oAj0aj7oxehAtSSjkOq4uAcRi7S0ZZtF7pwXRDr%2FHJtJj8Eyx3KihjJbn5qRnei4NpnMbeaPAYrU%2BYPGq%2FXSYxTll5ayupsIaEAZpROott7TXcRxQLiF7F%2B4D8AliDg6AsxhRUgvUedyZt0LeqNmk%2FgXw4nE6%2FHN7%2FiR%2BfT%2F9OcZxSKi%2B4xrzDnXHa79B53w7w5U64KK45YUHpxodtxF5Zo4dVbTfe3ZGCi4KPV190u5N2vORklpVcXtMuglPQI126T9KSylH5IZdfJzL5gTJZFLMeS5bL%2F1s4pgBqezXODh59zAgtsWcT2vvzaT41QvLb2N01PFNS9QbjRmm%2Fu1Nf5nz0cIwtbpWxGLprF42xafaaV%2FVcZmRcKB3bcXNaH82rNT8dP5zx%2FPnw%2FOXT4fPx%2BTzfJCGuE1Mhwuh3NK7xaFzy10iqvWvMGns%2BIZ8Pn387znicyQkvboJxTzg4MZofAaPvQn3PRTcGxAiuvnytnpJvsbHeB1R6WRlxW4DLZGCHjVXr72E4OnKQeZmSSXn9ZjWdtbEOAA5jDLgBpSFg7ALc6YOJqz03qm2NgxiHqh72aOp5GP%2F18Y%2FfZ1krCkoXGljfkYFxmhdTg%2FimiZCWyygTfNjBl%2F8AxoeNpQ%3D%3D\u0026pcode-icookie=CdixACOd3fOH1au%2B49a16zum8hl11Of7mOhQ4t9tqE6qg%2BZV24Y%2BDfk0TOA0FmlZF2j4K4JT6uqoVtcnBu4cOEvU38k%3D\u0026disable-base64=1\u0026imp-id=1\u0026banner-lang=vi\u0026ecma-version=es2017\u0026same-node-hit-number=0\u0026test-tag=145135534866434\u0026tga-with-creatives=1\u0026top-ancestor=https%3A%2F%2Fwinrar.com.vn\u0026top-ancestor-undetermined=0\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A879%2C%22h%22%3A0%2C%22width%22%3A879%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A199%2C%22top%22%3A133%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D\u0026grab-orig-len=3560\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CkKmtJDjOO5BFKjrh7V_HtO2Qu2eSv-2tGlTePpuqfuifSEhHol8zMJchlO33Pjuwfu-scYa6991n_v279uYDm9882IH2AewDaqKCBPTtjS__RvfjElYROGgqoKqwuFkSTfYnGxWJpsjJckw2QQVE4hpgZoiDBIYqydwgMAEMa6aEya2vShIWUmyFynyA14dLERM7LQxgwM0Jra0QF6YAwsprn7MkPSNJiZ2tJeRul8DXajwYO4bcbihKEc3pbqx6iYiSqYpFyWpUtIi5RYtSmaUEFH6xA1wgHnyGOAB9RYYWNjvAQ6QcemnYiQM8BBSAIKfDHOBBzxYgGJgQSjPM52UuJEx9IBNK2NgAXyZGFggRMahYYAHQdohDaT49HHszRhYgFtJOaadsuIACCDSFnAQy3thYAEh5mMBD_FYCliIy3qhkH057PTDAtihoiOmYWK_lzZwFRNSOgTgQcSEIFFyqWPAM3EgawpT5ocBAHf8pM4NPmBpTJwtRpVlRJSiOkAp2RzZLONwNoeZ6A7a5FdTNJXTm1U5Uf3A2JyqSOnUPJIP_FCkyqLRDKHTD80UP2DlAJnUUJikDitwE5Uk1tRBSZS11cdnS3e3WkSabkF_RAQ1Lc6yavxdK-V9Mu4z-kSB8sb3SLjThutLc10t6nTMKAJlzn04DSMa6FJ4DGwCpT5toixyuJUdmnjorwNNjAx0FKCltAQ5oSUAfwkUGiVqCQLQLpfb5tj-dSQW-XK4npKTSdmw_iLszdW-Jt-afyph1dYQt-T5RpdWSn8rWzdkUuq0O0kKxZRVLcqJbqJzQwAeiMqmBpzmj5d_6iSm1si-1bzkfffkBog7FjUyLkohYJj5yq-PK5SquKhonfslMNaAm_RlijgSgFoDbm4V-JeKKKMphM5b3N-G7s-2DWBX_3u6pJWclVDvvKQ8gIoz7sz2GlWVNBXM2atCD9W48VKyoadC3aM8XLyJFIr43S0rqdYS3-ZHQ3FNfVm36Fdijh7S19BPYWo7-Jlfp4z4D6iv_FFmE5clQ8zhsthNK176GolNVEvrU34y8U6MorROhW-QJ87XWJ9rq3V1aTA1yNHQKpPCSBGPkg3rvenaUx4dUNtqY3g36OcUchmTos2YsIqPKO1b1LkeN2xHSE4PMrl2FyP6DKnboaBqRw0ROZghIgMzRKSoQ8xk_bX3bfACxYLuX3cUBGWJqnZVImvFcBO80KnxBVVR0S-7YCv74VI2X8pd0I14upu-QCNo74JRK20ZOuIZKHuEs71EJMT2ksAA1V44UOEflgjhV2YggQY1qfaCDPKBwCMExV7ikyA93psxEoqG-EWWyirSK9eXLbdbe8W9rpXauVxXGFkNfo84a9y5xuRcqmYPrsPRP55JoGSuPPnYtya8fKrOYgzM0K7Saq_k59EoxzpApcVLYzppZFi0FhZDS6t85FjeFOQQwEraPN55tz4PlYlrvsIo83QykiVo7kWp-kTiF2rISU9TVhdXPQko4kkJTb9Ef-Qh6TFbC_3s8wCZJE-phomMOLSMQ-aPO-BjvpRod3BaEX7voW32d1lf2Jn2w95NOTkF8y6ZnJzl0qzfCNij50iFe6qz-Db0B_k3GtIBM9Ooiqs0ycVwwBAuX27nqQ6B2nFD_GGRkVMgI195BmswqBN6fxfvtWJPFMHwn_c4_JLzjnxfddz1VRkguv-Z_jvzYYZsc5knPS8ddro9sf5GfjqTinc5a6za6nOv2-gU1Hu89Ztnh3F0M9zsdNSoU8850AxM5rCZ_i1vC4ORMc5giuFIvOc8XxpV__Ol9VvquR2AaWrXMZGxAtM_2J_XV5c_rQzBXH20eF62TlJ5zMNZlyZwsu672jryRBhJVBuG7lMSa89d3VDpQtyeF43htt4hnPgG8wu9dpOOcSRtB6x_vuqEWPgM5YHpP7eGP7wNEgT3utXww8_fV06Q7W4tLXKLfFYB8RKvHK6bOkKhmf1ZNCM4UvBmGw4SkEbFaYbqad4HuV8E6prILCRkU7QNYEqP5Ew89ae7MnZP-8Q-5KAEyTziyle1HR4JZxSqqYuzrPBS24Kw_jtNj3Z2OubjloIQmkgkl-lY6-ytNC4P-4lKyMjO0AKzZRowOlI_isL3O-RJlJLPFC4CTdHrUd1T2w5TmS9CrnhLgpCQghQZUof2zUtEcATzLH6H1KKdd0FTWXCgzvBrY8cljHVcOCCNpGcFtwVtCgf_c1SCFzwwNwumzPvdnY8aDuS_vyVduN_5MlRx8xm-FnzTE5O11i_e8HsJPcMy4zB1gqDM0RayvNumYb7EbUEdc_OOeZ9QjhnV2BAophmCC-xYI-42po7NdjyQJIb726Db0scGWsGetZ5afHyw5-t7F2csqLSpfgJLLh0VLH7E7VpviqinCruWkCsc_hPBfHnxDsEFhXChhe5fOD7b3EYoGEfkz2lfOYIqSMdlFFQYaccUOilaQjgtk4P0nID1sE-zcMMftQubYOhxpr7kftyIwp2duaG7tEdSSd2-VC99xicjZIIlOCHdx0MR_bx7opEmPiLtiEzNY6NlumEKShAUfPgPY_hxv1Mhb0bVzTBZ3iaKsM0B4ri7GVB6cswuzz3vW2dL2qrsgQ0iylqiYTAmEV1sBvi67rDj6Wse6WUMCVFt2eZVW1JEnDh5Byt4ng4EcZdSeyTm2MdYrJmwYG2D5Ec43WbVQ0CS58nHdCN63QzJW-snsB9rvM7omM2waTTDI4lMRUtn8M4M_N2TbjQszmiGHcZqXDTiaGr2AOJrisNIQ_jS5tqz9SgEvTqJsYiCjsvq028_KNp-TJ3tlQlfNM7zKrXgcbincmqPFoO3rFMcGej94gnJfCamZ5YVqexhvDmD4hXm4htX6GZZ1vhJobG_nh3IYUuaN_BMBTVnMEZfxoBoReiCIcO_-_mj63g6o8HSt1LHwCQ2FI9QdxIyILhmvx3qO3iXd8pl-86DDtEXZLQUUDzHLjgDb5YyV1F4gTbi6Jrz0b9hZc5f0trFILIgp3gCMo81Gh6WNeidEQbB9vhxXXZTx0SbJWo5LrUE8e8L7nFzbghMH3rXMoDdteOh8UeLTIGLmDUaibXw-57O0KX6ST7jF_ZPnPdLDNH1nAUksz0sI33kY_ww1qATaG1K7CTCLobX_M4Nfl1Q2_G-F7LzCg_0IKwGvzqL12TOetdH7uRjP8yyg3Bo_j71jrdhL7SvGkE-yuq-GPDXyaPuXx9BWngw94KTDGikFhlSoFtkFlkAqa-OiCTUxMhcDX8lEzeAvK9sAlMe3kM3lcqj1lMJ-Dxox8MG0IwBtDC-pkmmgjq46GP4v3DzeYklXNAdeLzKJsqzFIT1-RCfKYcdCuBrURqQ_HyQ33qpFKzKZAzox-GkSclJkY6N_TKr_ER6tFCSfKWVxMiSvIopmwrdZFooX_skrbkCNJ0Fv_FQoJSy-XDwU0n1qiSyjCRnU-kJvMvhkBCvqmhMsbwrxaDdmYYpb30DWVRVTZGsADo95DXPcV0QYAblicqXXAGEC9cTaACCDuA%3D\u0026uniformat=true\u0026callback=Ya%5B8525199289410%5D","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:14.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 06 Feb 2026 06:58:08 GMT","end":"Thu, 06 Aug 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:59:19:A6:7A:7A:52:5E:F5:B8:9A:A0:2C:24:3D:1C:0E:39:E3:EF","sha256":"00:4B:73:AB:C7:08:25:68:A0:71:82:92:46:23:A2:69:73:FB:7F:4A:B4:ED:30:A5:F0:22:C3:FA:17:C3:55:EB"}}},"request":{"raw":"GET /ads/meta/7080777?target-ref=https%3A%2F%2Fwinrar.com.vn%2F\u0026pcode-version=1304840\u0026pcodever=1304840\u0026comboblock-unencoded-vast=1\u0026ad-session-id=463011777458914394\u0026target-id=75305117\u0026pcode-test-ids=918197%2C0%2C5%3B1387855%2C0%2C68%3B1548369%2C0%2C30%3B1519497%2C0%2C21%3B1471934%2C0%2C88%3B1534006%2C0%2C60%3B1538640%2C0%2C41%3B1549205%2C0%2C43%3B1513559%2C0%2C52%3B1543959%2C0%2C15%3B1551119%2C0%2C21%3B1529972%2C0%2C38%3B1553597%2C0%2C4%3B1485711%2C0%2C35%3B1534167%2C0%2C82%3B1513548%2C0%2C61%3B1550660%2C0%2C2\u0026csrf-token=29cdf22d88008d4fb1402058a1aa1e98a57f9249%3A1777458914\u0026pcode-uid=8302388311777458914\u0026pcode-flags-map=eJyFldGO2zYQRf%2FFz9uAFElJ1BtXHNnE0qRCUnLcohi4qVO0dTdB4hYpgv33QpZjVFpAfjJgcA6Hd%2B5cfVvtVWxjUo8Wegir6qdvq38Op7%2BPq2pF35RZ%2BYYyWbLVw%2Bp8%2FHI2vw5%2FC0FlTlcvPz%2BsehVxLMYeQjTeTQmM0LzMJ9WMF1yUt2rr11h7l8Al1F1QyXiHLYQaXJqyppSsIHl2oWgTLw1oiCn4PcK7BMEpi3UAlUwPqDR2EQLW1kdA6Ofo49dPEzjnMivE6uXhzpHs9ooAtbJ1Z1UCDPC2g5hwC2njNTY%2B4C6otoWAXbDLFwsiuLhQ3wZ8tKp%2BQmtiwtqaQSCj41QTIjNWSi6qsiyKLKOkYkSSPCO5qCgRnOdSlBWjMpdFLljFCKckY4RVUlJOiCgqSgmhNCtIxWhJOcmL4RjNCCkzWlHCCedCZhXLKMt4OfMCLyjJRi8ordFs1RpwrayFsEfj0EEX%2FDAas3bLTy%2BpJPw7yLg1Dj%2BDG5TFVgW1hQQhXuTUJqZgHrs099traC5luTzI4ch4L7iLj9oAj0aj7oxehAtSSjkOq4uAcRi7S0ZZtF7pwXRDr%2FHJtJj8Eyx3KihjJbn5qRnei4NpnMbeaPAYrU%2BYPGq%2FXSYxTll5ayupsIaEAZpROott7TXcRxQLiF7F%2B4D8AliDg6AsxhRUgvUedyZt0LeqNmk%2FgXw4nE6%2FHN7%2FiR%2BfT%2F9OcZxSKi%2B4xrzDnXHa79B53w7w5U64KK45YUHpxodtxF5Zo4dVbTfe3ZGCi4KPV190u5N2vORklpVcXtMuglPQI126T9KSylH5IZdfJzL5gTJZFLMeS5bL%2F1s4pgBqezXODh59zAgtsWcT2vvzaT41QvLb2N01PFNS9QbjRmm%2Fu1Nf5nz0cIwtbpWxGLprF42xafaaV%2FVcZmRcKB3bcXNaH82rNT8dP5zx%2FPnw%2FOXT4fPx%2BTzfJCGuE1Mhwuh3NK7xaFzy10iqvWvMGns%2BIZ8Pn387znicyQkvboJxTzg4MZofAaPvQn3PRTcGxAiuvnytnpJvsbHeB1R6WRlxW4DLZGCHjVXr72E4OnKQeZmSSXn9ZjWdtbEOAA5jDLgBpSFg7ALc6YOJqz03qm2NgxiHqh72aOp5GP%2F18Y%2FfZ1krCkoXGljfkYFxmhdTg%2FimiZCWyygTfNjBl%2F8AxoeNpQ%3D%3D\u0026pcode-icookie=CdixACOd3fOH1au%2B49a16zum8hl11Of7mOhQ4t9tqE6qg%2BZV24Y%2BDfk0TOA0FmlZF2j4K4JT6uqoVtcnBu4cOEvU38k%3D\u0026disable-base64=1\u0026imp-id=1\u0026banner-lang=vi\u0026ecma-version=es2017\u0026same-node-hit-number=0\u0026test-tag=145135534866434\u0026tga-with-creatives=1\u0026top-ancestor=https%3A%2F%2Fwinrar.com.vn\u0026top-ancestor-undetermined=0\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A879%2C%22h%22%3A0%2C%22width%22%3A879%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A199%2C%22top%22%3A133%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D\u0026grab-orig-len=3560\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CkKmtJDjOO5BFKjrh7V_HtO2Qu2eSv-2tGlTePpuqfuifSEhHol8zMJchlO33Pjuwfu-scYa6991n_v279uYDm9882IH2AewDaqKCBPTtjS__RvfjElYROGgqoKqwuFkSTfYnGxWJpsjJckw2QQVE4hpgZoiDBIYqydwgMAEMa6aEya2vShIWUmyFynyA14dLERM7LQxgwM0Jra0QF6YAwsprn7MkPSNJiZ2tJeRul8DXajwYO4bcbihKEc3pbqx6iYiSqYpFyWpUtIi5RYtSmaUEFH6xA1wgHnyGOAB9RYYWNjvAQ6QcemnYiQM8BBSAIKfDHOBBzxYgGJgQSjPM52UuJEx9IBNK2NgAXyZGFggRMahYYAHQdohDaT49HHszRhYgFtJOaadsuIACCDSFnAQy3thYAEh5mMBD_FYCliIy3qhkH057PTDAtihoiOmYWK_lzZwFRNSOgTgQcSEIFFyqWPAM3EgawpT5ocBAHf8pM4NPmBpTJwtRpVlRJSiOkAp2RzZLONwNoeZ6A7a5FdTNJXTm1U5Uf3A2JyqSOnUPJIP_FCkyqLRDKHTD80UP2DlAJnUUJikDitwE5Uk1tRBSZS11cdnS3e3WkSabkF_RAQ1Lc6yavxdK-V9Mu4z-kSB8sb3SLjThutLc10t6nTMKAJlzn04DSMa6FJ4DGwCpT5toixyuJUdmnjorwNNjAx0FKCltAQ5oSUAfwkUGiVqCQLQLpfb5tj-dSQW-XK4npKTSdmw_iLszdW-Jt-afyph1dYQt-T5RpdWSn8rWzdkUuq0O0kKxZRVLcqJbqJzQwAeiMqmBpzmj5d_6iSm1si-1bzkfffkBog7FjUyLkohYJj5yq-PK5SquKhonfslMNaAm_RlijgSgFoDbm4V-JeKKKMphM5b3N-G7s-2DWBX_3u6pJWclVDvvKQ8gIoz7sz2GlWVNBXM2atCD9W48VKyoadC3aM8XLyJFIr43S0rqdYS3-ZHQ3FNfVm36Fdijh7S19BPYWo7-Jlfp4z4D6iv_FFmE5clQ8zhsthNK176GolNVEvrU34y8U6MorROhW-QJ87XWJ9rq3V1aTA1yNHQKpPCSBGPkg3rvenaUx4dUNtqY3g36OcUchmTos2YsIqPKO1b1LkeN2xHSE4PMrl2FyP6DKnboaBqRw0ROZghIgMzRKSoQ8xk_bX3bfACxYLuX3cUBGWJqnZVImvFcBO80KnxBVVR0S-7YCv74VI2X8pd0I14upu-QCNo74JRK20ZOuIZKHuEs71EJMT2ksAA1V44UOEflgjhV2YggQY1qfaCDPKBwCMExV7ikyA93psxEoqG-EWWyirSK9eXLbdbe8W9rpXauVxXGFkNfo84a9y5xuRcqmYPrsPRP55JoGSuPPnYtya8fKrOYgzM0K7Saq_k59EoxzpApcVLYzppZFi0FhZDS6t85FjeFOQQwEraPN55tz4PlYlrvsIo83QykiVo7kWp-kTiF2rISU9TVhdXPQko4kkJTb9Ef-Qh6TFbC_3s8wCZJE-phomMOLSMQ-aPO-BjvpRod3BaEX7voW32d1lf2Jn2w95NOTkF8y6ZnJzl0qzfCNij50iFe6qz-Db0B_k3GtIBM9Ooiqs0ycVwwBAuX27nqQ6B2nFD_GGRkVMgI195BmswqBN6fxfvtWJPFMHwn_c4_JLzjnxfddz1VRkguv-Z_jvzYYZsc5knPS8ddro9sf5GfjqTinc5a6za6nOv2-gU1Hu89Ztnh3F0M9zsdNSoU8850AxM5rCZ_i1vC4ORMc5giuFIvOc8XxpV__Ol9VvquR2AaWrXMZGxAtM_2J_XV5c_rQzBXH20eF62TlJ5zMNZlyZwsu672jryRBhJVBuG7lMSa89d3VDpQtyeF43htt4hnPgG8wu9dpOOcSRtB6x_vuqEWPgM5YHpP7eGP7wNEgT3utXww8_fV06Q7W4tLXKLfFYB8RKvHK6bOkKhmf1ZNCM4UvBmGw4SkEbFaYbqad4HuV8E6prILCRkU7QNYEqP5Ew89ae7MnZP-8Q-5KAEyTziyle1HR4JZxSqqYuzrPBS24Kw_jtNj3Z2OubjloIQmkgkl-lY6-ytNC4P-4lKyMjO0AKzZRowOlI_isL3O-RJlJLPFC4CTdHrUd1T2w5TmS9CrnhLgpCQghQZUof2zUtEcATzLH6H1KKdd0FTWXCgzvBrY8cljHVcOCCNpGcFtwVtCgf_c1SCFzwwNwumzPvdnY8aDuS_vyVduN_5MlRx8xm-FnzTE5O11i_e8HsJPcMy4zB1gqDM0RayvNumYb7EbUEdc_OOeZ9QjhnV2BAophmCC-xYI-42po7NdjyQJIb726Db0scGWsGetZ5afHyw5-t7F2csqLSpfgJLLh0VLH7E7VpviqinCruWkCsc_hPBfHnxDsEFhXChhe5fOD7b3EYoGEfkz2lfOYIqSMdlFFQYaccUOilaQjgtk4P0nID1sE-zcMMftQubYOhxpr7kftyIwp2duaG7tEdSSd2-VC99xicjZIIlOCHdx0MR_bx7opEmPiLtiEzNY6NlumEKShAUfPgPY_hxv1Mhb0bVzTBZ3iaKsM0B4ri7GVB6cswuzz3vW2dL2qrsgQ0iylqiYTAmEV1sBvi67rDj6Wse6WUMCVFt2eZVW1JEnDh5Byt4ng4EcZdSeyTm2MdYrJmwYG2D5Ec43WbVQ0CS58nHdCN63QzJW-snsB9rvM7omM2waTTDI4lMRUtn8M4M_N2TbjQszmiGHcZqXDTiaGr2AOJrisNIQ_jS5tqz9SgEvTqJsYiCjsvq028_KNp-TJ3tlQlfNM7zKrXgcbincmqPFoO3rFMcGej94gnJfCamZ5YVqexhvDmD4hXm4htX6GZZ1vhJobG_nh3IYUuaN_BMBTVnMEZfxoBoReiCIcO_-_mj63g6o8HSt1LHwCQ2FI9QdxIyILhmvx3qO3iXd8pl-86DDtEXZLQUUDzHLjgDb5YyV1F4gTbi6Jrz0b9hZc5f0trFILIgp3gCMo81Gh6WNeidEQbB9vhxXXZTx0SbJWo5LrUE8e8L7nFzbghMH3rXMoDdteOh8UeLTIGLmDUaibXw-57O0KX6ST7jF_ZPnPdLDNH1nAUksz0sI33kY_ww1qATaG1K7CTCLobX_M4Nfl1Q2_G-F7LzCg_0IKwGvzqL12TOetdH7uRjP8yyg3Bo_j71jrdhL7SvGkE-yuq-GPDXyaPuXx9BWngw94KTDGikFhlSoFtkFlkAqa-OiCTUxMhcDX8lEzeAvK9sAlMe3kM3lcqj1lMJ-Dxox8MG0IwBtDC-pkmmgjq46GP4v3DzeYklXNAdeLzKJsqzFIT1-RCfKYcdCuBrURqQ_HyQ33qpFKzKZAzox-GkSclJkY6N_TKr_ER6tFCSfKWVxMiSvIopmwrdZFooX_skrbkCNJ0Fv_FQoJSy-XDwU0n1qiSyjCRnU-kJvMvhkBCvqmhMsbwrxaDdmYYpb30DWVRVTZGsADo95DXPcV0QYAblicqXXAGEC9cTaACCDuA%3D\u0026uniformat=true\u0026callback=Ya%5B8525199289410%5D HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://winrar.com.vn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nset-cookie: bh=YOK9x88GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Thu, 03 Jun 2027 10:35:14 GMT; SameSite=None; Secure\npi=SUPAi3QQ6QNpHv3tkjTPh9daK+eVIIlaZkpp+bVaz9iyXAQP8ZtANgOEMsdg1ygDkXNj1/1y9+LmuOP9dZ5Crukhbto=; Expires=Fri, 28-Apr-2028 10:35:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None; Partitioned\ni=lWHCjkrjcPOLYhbFrs+MEatRzEb3qQWbgfOsITj+kQg3xVdUXydAFqRPrM6gcgWK6U8uuSRBfiI5LcMu5Je5RcIQNaU=; Expires=Fri, 28-Apr-2028 10:35:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=1224990631777458914; Expires=Fri, 28-Apr-2028 10:35:14 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=2761546531777458914; Path=/; Domain=.yandex.ru; Expires=Thu, 29 Apr 2027 10:35:14 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YOK9x88GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Thu, 03 Jun 2027 10:35:14 GMT; SameSite=None; Secure\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nx-yt-trace-id: 0-1-0-0\r\naccess-control-allow-origin: https://winrar.com.vn\r\nx-ads-degradation: 0.000000\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nx-ads-service-name: yabs-server.partner.meta\r\npragma: no-cache\r\ncontent-type: text/html; charset=windows-1251\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nx-yandex-req-id: 1777458914676774-5236724637922499063-balancer-l7leveler-kubr-yp-klg-196-BAL\r\nx-ads-loadaverageonarrival: 0.484848\r\nx-content-type-options: nosniff\r\nx-ads-loadaverage: 0.545455\r\nlast-modified: Wed, 29 Apr 2026 10:35:14 GMT\r\nx-xss-protection: 1; mode=block\r\nx-ads-queuetime: 0.078000\r\nexpires: Wed, 29 Apr 2026 10:35:14 GMT\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\ndate: Wed, 29 Apr 2026 10:35:14 GMT\r\ntiming-allow-origin: *\r\nx-yt-request-id: a92464d-4de739ff-dcaf0c82-321350ec\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":30,"size_decoded":0,"mime_type":"text/html; charset=windows-1251","magic":"exported SGML document, ASCII text, with no line terminators","md5":"2f5fd418ef788ac2f0143b38fcdca98a","sha1":"ef809b976a61bcc205dc156379d76d291a9f5ca7","sha256":"bb7c2248ca6243882b1a83dfa92e38c8237a50ab3ce93a5e5e905a149a069147","sha512":"5ef5de32e15f5ecb48145247722ad556cf0f168be4a9d75e8df0ae796bab924c41ef548c41d612cb77ebddf7c27da0aa9ef5b2505b9ca5ca29b075f289a10c92","ssdeep":"","tlshash":"5f80002cb83022a0a800caa8b803828b8bac8000c08220200008308caa8f200c08c828","first_seen":"2026-04-29T10:35:39.614276Z","last_seen":"2026-04-29T10:35:39.614276Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/images/install/install-winrar-4.png","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:12.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET /images/install/install-winrar-4.png HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 76442\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 06 May 2026 10:35:13 GMT\r\nlast-modified: Thu, 15 Jul 2021 14:41:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2KmRXdgFwQKtxc1JWWnz2oOIT3UMd3o1Uojjk0W7PNgZHIh%2FKGG66bAjUFGB9Pi9XlMxK2BqLUwXQXqsGzMRcudTy0fP3Ra%2B%2BXono4DCPYD71WFOqN86sXnhtXIweqW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3da89b9c5ab4f7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 306, 8-bit/color RGBA, non-interlaced","md5":"6ea555b62f0dddf70b1e83a9ad44396e","sha1":"79aa025e22f4a4fb9051e50d446accc6fa11bdae","sha256":"5a7b3c254a483c6b7003dbdf7882fd20063b7e5a23eb14351d901fb06701d453","sha512":"2146269665d269a4b99df8753c9a45d72c10c71ec1267d1d4f4d4f5c64d9b5d14b3a21a2ea4e01054e2ac8fecd15b96e596bf0244abdc192c75b35d7595b1731","ssdeep":"1536:MjJvmGkdx+0c+htlXX9KSt9yldz2N3ackHrcPJvmtQkqAKjQ4:Mjgpx1Dhtltzyrz2gckHrsmQkqjz","tlshash":"bd731252226b13c5788821b231746a93b7630adf3da2ad236dc044f53f07396c9cbb67","first_seen":"2026-04-29T10:35:39.615206Z","last_seen":"2026-04-29T10:35:39.615206Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1099,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":874,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:14.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nOrigin: https://winrar.com.vn\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 29 Apr 2026 10:35:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31556952\r\nx-nginx-request-id: 88ca5522ea612469\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Thu, 29 Apr 2027 16:23:13 GMT\r\ntiming-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\nx-strm-log-split: 4\r\nx-request-id: 12ead69910271bd4\r\ncache-host: cloudcdn-rad-09.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26004,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-04-29T12:19:07.456457Z","times_seen":23427,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":63,"dns":0,"connect":14,"send":0,"wait":15,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/images/install/install-winrar-1.png","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:12.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET /images/install/install-winrar-1.png HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2088\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 06 May 2026 10:35:13 GMT\r\nlast-modified: Thu, 15 Jul 2021 14:41:16 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=koJB%2B5krXtrwpJI2eREM2zDnML8u5idsc4RzOYbiL3xXVmad4FjP468m9wfboBmtgsQb%2B5xPFnoK%2BTj0a2r5euSVw5d0QAd9KP%2F2LlQs7VRIPZvliBiY9LP3JqVR8uef\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3da89b9c57b4f7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2088,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 236 x 49, 8-bit/color RGBA, non-interlaced","md5":"92becc85c53817af1cd45322dce29f1a","sha1":"82eaece4352bef9ec8009d44566a7ff36aa57f42","sha256":"a18434451b49d55bc26829cb89650b9589fff30f6e51d3c7b4217e190bf51020","sha512":"48f7be259cd4f3276775d2d563f49991108683c3a57e3acfe98eef01c2607ad0eafeea1d723db536d1b740c9153b10ee0fc04ee50027cb30127989c9d65a1749","ssdeep":"","tlshash":"f041c785eeccd8ef8208b3df672a493cf9f59e4c3e11b444b860d5e12a517da54107d6","first_seen":"2026-04-29T10:35:39.616969Z","last_seen":"2026-04-29T10:35:39.616969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winrar.com.vn/images/install/install-winrar-2.png","fqdn":"winrar.com.vn","domain":"winrar.com.vn","tld":"com.vn"},"ip":{"addr":"172.67.207.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winrar.com.vn/","date":"2026-04-29T10:35:12.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winrar.com.vn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 05:40:20 GMT","end":"Fri, 24 Jul 2026 04:17:27 GMT"},"fingerprint":{"sha1":"43:E8:4F:E7:3D:3B:89:1A:56:F0:A4:BA:09:85:51:93:D3:09:2E:87","sha256":"BE:0A:7A:7B:B4:95:C0:49:85:02:50:EF:EA:92:30:64:2F:AB:A0:2C:B1:10:F3:92:44:7D:53:3F:FF:D2:E5:00"}}},"request":{"raw":"GET /images/install/install-winrar-2.png HTTP/1.1\r\nHost: winrar.com.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winrar.com.vn/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=85770da48b9a6a113d48cf4790d88960\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 29 Apr 2026 10:35:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 26481\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 06 May 2026 10:35:13 GMT\r\nlast-modified: Thu, 15 Jul 2021 14:41:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=191HwSxHZC07d0yXDGJVCgPLQFj%2BzC0sp%2FoWlYu74ZxfsnW8ast%2FLrrceYTu8HP1TP1qkFY2b2KPlsjgKUL5bKByLoEi3GHF1YOmw0ZzVSwyq2jcFrRRdG2lvHwXjL3x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f3da89b9c58b4f7-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26481,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 456 x 333, 8-bit/color RGB, non-interlaced","md5":"b1c17d6658d6fe29420d6b99319b647a","sha1":"8d19f5defda62c3b44097c482ca406c86790f507","sha256":"e0b9c72e82a347dae82a810adbdc04b2d48570864a74156021815c5500835b41","sha512":"d435306560b2114c0f0fa4244b43a770fbc0372b0e6f38268fba2d939deed067e26745eb05c5198f0cb7618044bcc4051519fc4580c7039964a9c4f975ad5e09","ssdeep":"384:DejH8GvKMhmUHrRLpI+BHd3dGqKczClKIMMju/RCIJ1hPi8sHHF0TLBGY:DOLiUg+pG0ClK/HRCILh1sF8Lf","tlshash":"45c2d0fe655aa0e8d4bb2dd0315122cb6dfa72a636bd9393040527420337906df7eee1","first_seen":"2026-04-29T10:35:39.617887Z","last_seen":"2026-04-29T10:35:39.617887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":884,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}