{"report_id":"ed34087d-79cc-442d-9963-db99fb332db4","version":0,"status":"done","tags":[],"date":"2026-06-25T16:56:14Z","url":{"schema":"http","addr":"citihnwi.com","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"title":"AXENDRA","dom":{"size":52915,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42379)","md5":"f1d393e3679a08f39fc2c2969028f9a5","sha1":"063f8ed36770d7b147860ff9d83296b98928c210","sha256":"20659e01e33c3ee5fd3bc81debe42baa2fde9af1d7e838209662df01098e8c68","sha512":"1c269e62e5811b78f26ac86466a4b3a9162db460ea4fa2a118b43779c59cd67830b37a387237aa6ef73384187d41c1b36177277dd115f1a477eefb68b947271f","ssdeep":"1536:wNBU0pt11GOP/7u6FXZiJZm+6An/7RaoKTvpx4wmN55e7K7hIPzemlJLtD+qAlzB:wNBH8","tlshash":"d533efb0a00860771577eac1f8707f4975a3f30bc64e84187eae42a58fd7da0b967e64","dom_hash":"domhashe8699c1c5cc504c2dc52d786d62eb59e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"citihnwi.com","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-30T16:56:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"admin-api.qprchs.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"admin-api.qprchs.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"admin-api.qprchs.vip","ip":{"addr":"104.21.93.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-29","domain_rank":0,"first_seen":"2026-05-11T12:44:37.548546Z","last_seen":"2026-06-18T17:24:13.52507Z","alert_count":10,"request_count":5,"received_data":10946,"sent_data":2835,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-21T22:41:40.060069Z","alert_count":0,"request_count":2,"received_data":261050,"sent_data":1101,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"citihnwi.com","ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-29","domain_rank":0,"first_seen":"2026-06-25T16:55:31.552746Z","last_seen":"2026-06-25T16:55:31.552746Z","alert_count":0,"request_count":48,"received_data":4432373,"sent_data":21993,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"h5-api.citihnwi.com","ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-29","domain_rank":0,"first_seen":"2026-06-25T16:55:31.540607Z","last_seen":"2026-06-25T16:55:31.540607Z","alert_count":0,"request_count":47,"received_data":576189,"sent_data":25042,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"admin-api.axendra.net","ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-04-06T13:09:07.604949Z","last_seen":"2026-06-18T17:24:13.543209Z","alert_count":0,"request_count":20,"received_data":613702,"sent_data":11417,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"98cb1f471a0de238da72628a4c39dea5","sha1":"de6c28f3b2e2ee6f1b47b45d014bff6a887bcd08","sha256":"b1e75cfc14734b3cb73043c2d0b3e1f10dd80af0775ef978ec39a0500f445f26","sha512":"5ea0135c7d00e74a33a6ee8ad3ea92eef10154456aade6904e59c1bafb3b755cf2e0c2d1c3efc83cae6dcf2db7354bb90ca930c1df504fa39eb03c381206c6a9","ssdeep":"","tlshash":"38c08cc5b0c26d40160aa49028ff35e89024442bb0881b428ce8e8983e220b08237e98","size":152,"data":"","first_seen":"2025-10-12T16:34:39.992257Z","last_seen":"2026-06-25T16:56:23.827895Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4342c075064069a75b21b06ec6c9c3df","sha1":"6d219c2b352a6e62d76bdceffcbe70cfe0b9ef66","sha256":"51d786f481e0b83ee1dc319b53342d36b4b4f8fbeda9e872f89e25ab0e41a380","sha512":"cc78154423bd3125ca7754f934cde50e37e904ab59ed3aad3e349c5be9447a95a5dbc5c39eaf5d3c2b8df659c2b29555ef731de13df95c7e4351f0fe084ca604","ssdeep":"","tlshash":"f7e0c089f4c43b50ac052429766e38e89030001a6ae85b6ad9fc88887b110f84633ef8","size":353,"data":"","first_seen":"2025-10-12T16:34:39.979026Z","last_seen":"2026-06-25T16:56:23.828458Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d7f30188eefc54566743b0560ea37910","sha1":"9ddfefbaeee03f35051d9482cea2f36ccd33a9cd","sha256":"46f138d5b096b2d454a1d06069dc1d81a79cc1865fa5b3810359947568d238d2","sha512":"dd319936b7d72e14725ad62623eec0594fe63e6e3c79d74a5ea99616d61c6afc1076654a8f8a248b61b3dcaaa20a9d807d2aa941cd20055e3d14687cbf757d9d","ssdeep":"","tlshash":"51c08cc4a0c23d101616645054bf24e59034402670481b229ed8e8482e220b09233e98","size":145,"data":"","first_seen":"2024-08-20T20:23:53.57009Z","last_seen":"2026-06-25T16:56:23.828966Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7ab6dc81a5c1758a8381906989c4f704","sha1":"c3550c4675f6cb594031a333a3919f4d9428a278","sha256":"5eea0b86438aaa77b6a0b077bd01275ac57ab8586461564354417051a2554648","sha512":"1f75183d8956f47b911386e6a074bb83a858d49f67e7b7e63e9a1ac721f06bbe905dd07686f270d1da45e8cb224361ac7ccf68e9bfb7a85af070d24ac0b81a1a","ssdeep":"","tlshash":"ddc08cc4a0c23e001612641819af24e4a034802770481b238ca4d8482e220b09233e98","size":140,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-06-25T16:56:23.829517Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5c7a39acdc80832820021580392fcb76","sha1":"a6978212b5941186e837a6216fbb774e529a2c0f","sha256":"50f915c4f4c0fa8f5d2c082a202659e6e67e6ba0ee02779b736c68ff2a0da2e0","sha512":"82b2b29d46269860ca9c6c31cb3c1065003579186ad2df34a4340ac939108b26cf8877e3a9a0e6d112efc75e7e7876d6d1f958dda85135c0f1294c0c4d02c5fa","ssdeep":"","tlshash":"88c08cc4b0d26d001602641160af34e49024802a74481b028cd8d8882e230b0a237ea8","size":139,"data":"","first_seen":"2025-10-12T15:34:03.485106Z","last_seen":"2026-06-25T16:56:23.830037Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"56ed1dc7a7c7c4d0135776e306ae9bcb","sha1":"18d8914c8d7a21ea2f664080fcbcaf0c942c3ac1","sha256":"055cb83a18d103da0b9e79549d4ca0aaa5b2c7445ede7bf18317c53d8d18570e","sha512":"3f4c3d523962372f297e9aab82917e8d07f1b8f69c4a1fa2ee8e3721d73001e60707bc6de4111ca20196ffefd97f3df6b2f07211b3841f397635d05b9cd4e2e9","ssdeep":"","tlshash":"b7c012d8b0c66d002616a41028af28e8a0288026b44c1b968da4ec592a620f48227ead","size":170,"data":"","first_seen":"2025-10-12T16:34:39.92057Z","last_seen":"2026-06-25T16:56:23.830529Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"47540997c6538c57830fb0ce972ce055","sha1":"8565f22fcbcff847c75545c1896ae84d4be4ea73","sha256":"0f80d63f8299c46291ef24637b760be2286a9f13587118e8c3af078cbba1d4a0","sha512":"5ca74a18fbfcd3273b667769d68236eb8eb2996fd1d8d84644584274ba0d6f5d43d6a1d2aabfc806c4e033c363d1493eb12d857d14eb3b4f40ceae3b793b4605","ssdeep":"","tlshash":"a5c08cc8e0d22d101a02b41424ff24e490a8442674481b069c94ec892e230b48233ea8","size":149,"data":"","first_seen":"2025-04-27T11:55:12.998082Z","last_seen":"2026-06-25T16:56:23.831032Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0381290b89e9198fc37d2e50b5f37797","sha1":"1508e92e22fcce03f5d3750ebdfa5abefe1b4e7e","sha256":"44841ff32b4f70eed44572ac672c77bd9cb91e417284049c17468f9e228122dd","sha512":"eb0e7d0c8ccca235d9f892dc29b843dc17ce5ab411959bd84620db36ca384f98e36acd31e3658904cf86c7c20d2fa0c7efcae2a1b2a68139d47df061f3f62003","ssdeep":"","tlshash":"38c022c6b1c63d804182711010bf24d090389122b0489b438cced8082b630b28137f98","size":192,"data":"","first_seen":"2025-10-12T16:34:39.937079Z","last_seen":"2026-06-25T16:56:23.831525Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-29T03:49:55.488827Z","times_seen":6463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-06-25T17:45:58.763048Z","times_seen":1481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-misc-B4Dt3apA.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c404deddc39b1a6abfb5142516f0185","sha1":"78a9228b4a184790b95453b65d0f50951cf64ead","sha256":"038164bd12cfa20a07ba22d6e060339ad884299a0188f22c87615bd2bb4f872d","sha512":"c16054b20637a5e2ba9a6ce9169215671e66e457e5dcf1bd9559de4dd0f455940bbde0c3e8bc5d7fe50b39df3783c9e08b9283126444e1258315d8d16266ec7a","ssdeep":"3072:O/e1oxkm6NvbB2PBztbXqB8TwWzHLlQHkN+Wvsj8Kt3qO:OQjNDBOBztbXqB8TwWf6ENZsj3BqO","tlshash":"d9041ac93691b02543ab11a6107b1407f37d6d6ca45c44a8f2a9d4fb3ef9c89927bf38","size":185909,"data":"","first_seen":"2026-04-06T13:09:14.729668Z","last_seen":"2026-06-25T16:56:23.808933Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0a6dcd4a293ca369ec22e3f632d87d77","sha1":"f1ceff18918a70369adbfac3c38de492f0970d31","sha256":"74b9b080545da650705afb7bb7c83deea7d8dba4f544194b01121ffc59ae1cd5","sha512":"c1fe1c83c092b6c8abc122a6503bde6642cfdceb2ff0bd4ec7229ad0f16a48eecb5f5a40445f1a9d67d980176f4d2593a2135412d81f3afd476ee6551706cf62","ssdeep":"","tlshash":"79c08cc4a0d22d101616691010af24e49024442670481b028ca4dc482e228f09233ed8","size":139,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-06-29T03:49:55.529227Z","times_seen":1769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-29T04:16:51.858186Z","times_seen":4245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"74bacb5421c2f8f04338a03d44befc4b","sha1":"389d6724ce1b39d00770efd249a374b38eba7b81","sha256":"b89832c7ab834cf0bb032697b4066c03e1b3e5c56ea79afaf45268381ed425a6","sha512":"29b6a3ad990e67fa83a9bf23e05e08110a4d71e8e6c6dad72de32e58491415c830d897dac2eae7970e5c3d1a273a097fd9d99849429498e9744be6583b620469","ssdeep":"","tlshash":"1cc08cc4a0c62d001a12641014af25e490244026b04c1b128de4d8482e620b08233ea8","size":141,"data":"","first_seen":"2026-02-25T17:49:59.600279Z","last_seen":"2026-06-25T16:56:23.834009Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-06-26T13:23:43.708497Z","times_seen":1609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-06-29T04:16:51.878488Z","times_seen":4154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-charts-CBxdiIYW.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb6fd5af8ed82fcb074422b471393f56","sha1":"5328c84f1554b51cc13916d556f412e6e71eccad","sha256":"10b1c65413e2c0284465f521857abf82dc59e10d3a66c4dbdbfbc6acbd9cbfae","sha512":"6f59bf4c626ffdaced0da12567bfaba66e08ea26978d13a6c90b5fda17d70f0606c578d6c44dffc71cea14ac2ac9eb73b8ff8cfea70cd3f482b4a42d0871e107","ssdeep":"6144:1Njp1ERor47j4ueZiuK5GvOWqLLrc8r7iWanrg+I:1Njp1yk4dec3sGWcFiWarXI","tlshash":"ada4199cf654b03583936170057f050fa33a290da44a86bcf669e4ee6cbd44e627bf38","size":461359,"data":"","first_seen":"2026-04-06T13:09:14.714425Z","last_seen":"2026-06-25T16:56:23.79713Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/GraphMin-C5cKP5D9.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60515c56c86e6ce7f313fa53afa2349d","sha1":"5a3bdeede8fce026b957bfcdcdb6ef23306570b6","sha256":"03ac3dc61a6ca854bab33f1180e59592975917abcad81b21cf8e1778b35de4a0","sha512":"a961049999cec06b711d065ea229070ef2b6a0e034eb1d673a018fb54930e2f5f378be1ee4da73585d61b28470d7c745b5559f366d4cd69b7bb3149c04b16b01","ssdeep":"","tlshash":"a131b72bfc10907b12319dfce029550a16bd3f6b2563c7d0f98c49532fb9c59b329a18","size":1799,"data":"","first_seen":"2026-04-06T13:09:14.713059Z","last_seen":"2026-06-25T16:56:23.764089Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/index-CiV884cu.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"578d5b88cc6e218c58b44d47f24f8b21","sha1":"d75ed3d697fe239bea41177eaf398f8b901cf21e","sha256":"f177a0e959c459e642ba76605a0deeee0cbdb975208a996802808a9efb0f5af1","sha512":"2d3a56e1a05a0eeb808f540957efa165ba570d380fcb7c64e8ba9aaebac5058df59f135da488f127a3eee03c8501e0f124969029602bad2d032a85effcaf4e85","ssdeep":"1536:zOTNJ/zhgZI8HGPkWCzrgQlc2iKP2D4HkpEq/Y2v6Bg3ckbAIO:8J6ZSX2YD4E22PdjO","tlshash":"06937d4ad6055bbe5bbd0cd86a07250061b04fc9e84cc827f77e5d5b2ff8c8952ab728","size":94879,"data":"","first_seen":"2026-04-06T13:09:14.740282Z","last_seen":"2026-06-25T16:56:23.812188Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-i18n-CO1gAzaB.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa23956003665fb4706bd6ab1f3ec34f","sha1":"45f4a0ce6a8f4b5f64504f69c03298f9a1c3cf5e","sha256":"66152b4075991d98fa94631308eb2db44152d87850ecaf7ef573304ce693235b","sha512":"668c23c4df75852dba17daefbcfac8ee1413f201fd7021460378024caf9f6e2451765f7f4457e8e4e36bf9359e314adf311bdde9c9ec2dd8002a254bd8d5efee","ssdeep":"1536:hHArKrrLeYWvXibPWK4VFriwmubW2gchMAUaXvJIasT:hgrGL037VFufuy2phMpsxbsT","tlshash":"e453e8d634d7b016937a45f660b30116bb3d1a28780ed994f1bce9873d33d6a82a3f19","size":63456,"data":"","first_seen":"2026-04-06T13:09:14.749676Z","last_seen":"2026-06-25T16:56:23.777996Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75b8f1b2957ba93ac46658bb6643e2d7","sha1":"4f3de855cbc7438135a354e44ba346e745c2237b","sha256":"c59f7654bfcd55d5c7123fa74e2110656dfcb8c1b476790d4efe784bc6b1e7e9","sha512":"25fd84c6e124e303e7212af99ebb9a169f6efeaafc9ffdd51d375d099b37cc1c2a5acb6ce1442f69827bb01b398d386e78bb9f80b548ef0c1d6a4eceea715ebd","ssdeep":"","tlshash":"2411abfe191ab0296313405e976b79116421a0a9000a584173ccdf9dab9abade0cfb8d","size":1040,"data":"","first_seen":"2026-06-18T17:24:19.354291Z","last_seen":"2026-06-25T16:56:23.835454Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-29T03:49:24.308256Z","times_seen":38583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-29T02:53:26.397432Z","times_seen":40632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/charting_library/charting_library.min.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-06-25T16:56:23.821053Z","times_seen":1248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dc094b1b256d5c643caee7dbb2759bd0","sha1":"adf30061bd73776882c9b3c4307b9da89a77e448","sha256":"1924a94a5275e97ac50fd4b9ceb9cd137670a857a159826847a1bf70e4aee577","sha512":"7a645e4da9bc62cd103bc2b66fdb43d40826816fa26b64e459fa8889e42b5a9a1b67ef8218e9cb6cd999a1b9121cb41b3d8baedb76d9b45e861e40d72279ad1d","ssdeep":"","tlshash":"4dc08cc9f1e73e1026566a1514af68e8a0344836b0891b8f9de4ecc83e630f08237edd","size":162,"data":"","first_seen":"2025-10-12T16:34:39.965367Z","last_seen":"2026-06-25T16:56:23.83696Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7d484391ae36f9672dd3a7e7d7be9763","sha1":"d53f53a7b8fd10a4966a66bf4850e275378a555e","sha256":"ceb3142d25d807ee8b06dfc21328ad2535124a2da646d83f8460e529f9ce6f47","sha512":"24b179dc9998205322e8c96e434a14e5e610c4faf8a4b78a3a415d067d26b327a94be7ac5f4dd2c2f52999d4693664b17625d2bf65655ad07665e3a8c1f4ed0a","ssdeep":"","tlshash":"6ac08cc4a0c32d402606641011bf34e49028842674481b429d94d8482e620b48233e9c","size":148,"data":"","first_seen":"2025-04-27T11:55:12.952615Z","last_seen":"2026-06-25T16:56:23.837477Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-vant-CT7DbSuD.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fcc33f173c7872525737de5ebee0a16","sha1":"cd5ed8085d23b576a17b55b4eaebd7b6852ae494","sha256":"2718176524f399e60092dffbbc1f08aeed5116eaa8a0fd4d054ebb17a2d838df","sha512":"32ce50ffa647067c61fa4b08062f5183c468fc7a7a34ac77e77e65043bdc5fde510bcdc6e29099694886500796da8fae5b7bb7ea2e5a1b03515c086ce2fe8bd6","ssdeep":"3072:YVE/br8JTwOalj06hRqo3zJf0Izgd2JPisoMoQcaOlroG9KX/:YVE6alQ6XznOaOlKX/","tlshash":"4bd32ad07485f1398bb784e5406b0510b62a1b59b009c5f0f17eadda2b6ecd5b2bbf2c","size":133241,"data":"","first_seen":"2026-04-06T13:09:14.701134Z","last_seen":"2026-06-25T16:56:23.821572Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7342e4e83efdd4685023506df50500a1","sha1":"d4e998baf5423c2212d97dc74cb641afd5acce8e","sha256":"b318b1783e618e649d51f2fd8823043ebd92c8e55930eb55798d63d62661d985","sha512":"47718a51ac2a72020f8504e34d011db4240075d28b43d5f3e360645aa64de90989ef46e947a5114e0b7d0a04001c6fb7a6dd9cc0d779069b9152f5f89f471fb8","ssdeep":"","tlshash":"83d06cf636b655802c85412e0acd2c21b1108233cc9e7a0c788c6c00afaf9181a78436","size":245,"data":"","first_seen":"2026-02-24T16:10:35.333553Z","last_seen":"2026-06-25T16:56:23.838454Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-29T04:16:51.858702Z","times_seen":7440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b1dcfa69604091c6b34e7d885ffa476e","sha1":"6fea510b921781ce00aba383120bb1be83e38522","sha256":"a95b8e1b8b49c34e4a6d0d7028a690a10957f373a79584d0787c6dab02693a5e","sha512":"b124dcc683d061ee449bad373209adc2c48dc9a3d9664d3c4bdb890ab460a85c9872587d8f21a3fa2f074bd72046b0e8f49b5d3978ee1cfba4e0cc34b369a498","ssdeep":"","tlshash":"72c08cc8a0c77e501a42655029bf24e8e024416ab0889b039d94dc4c2e630b4923bea8","size":148,"data":"","first_seen":"2024-08-29T17:49:52.033375Z","last_seen":"2026-06-25T16:56:23.83954Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6bf3d54da83101c2d0cd0d94a69d3c04","sha1":"d125f3ba021adeb05c5c7dfaf4fc7e74a0e7b3ee","sha256":"2a2418700efee08efa3470a8e6e387ed7f4769f63bb147a00d2ca287af1ea474","sha512":"6d32fa0a1baf76885888126915cbe4a60047748be8833907a4585c6248e25837cce5f38efd8ce543d95735a113922eb8e236f6fa50efde28ea544f9f85ae2fab","ssdeep":"","tlshash":"edc080cdb0d32e183e01692064af3cd4f1344467b14817528c94d85c2d330f54333e9c","size":178,"data":"","first_seen":"2025-10-12T16:34:39.962702Z","last_seen":"2026-06-25T16:56:23.84011Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4acf87d00c4897d30dc5cb9aeadd7c45","sha1":"dcf23a6536e55481fa1bac3bd3fd146a91e65184","sha256":"56727def1b270126ba40c9ffb947309084fc4a22d6caafd6f785307e9614ad82","sha512":"842f100296530229b32e93ef969aabe0745435f435f79bc069fbf45f5fd47526d2d8e7d2ffb09957fefdfd831d27a0d1c5814ae7ff0e5177f8813ca941bfe17a","ssdeep":"","tlshash":"5dc012d9b1832d1016166410957fa4d8912844767188ab92ded8e8583d534b45137f9c","size":178,"data":"","first_seen":"2025-10-12T16:34:39.945429Z","last_seen":"2026-06-25T16:56:23.8407Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"55c7691ac49fb33b8dbe27f3a42beb17","sha1":"d8eba60ec9a2f4726f867ddd2731b18d307e495f","sha256":"d421b1fe3fba609c2649edb854dfcf2a95ab5b80e78389d6493790d1b387222c","sha512":"9dedf1eec48e262d578058367dd918d73f291cebf9e4a0e4de626f6eb3f6e22c3a391a5a9fba72dacd5d3d36c24c387f727ad19b7a05458a858a42ea5a0608b7","ssdeep":"","tlshash":"5dc08cc4a0c22d101606682010bf24e490348026705c1b428ed4e8482e220b48233e98","size":141,"data":"","first_seen":"2023-07-05T19:24:05Z","last_seen":"2026-06-29T03:43:31.130809Z","times_seen":879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"99362d42c48c3ce8a91d0ef845a6d291","sha1":"7255a4d130d514351caf81f67fb4d9cc0d83c62b","sha256":"be94163fb61fb00bbe6983f50081c480207345b8954f9ee50fb2c1c2ae3e6073","sha512":"00d898d537893ec342ca42ae6de18ace2f732233bdcc9ebec86dadc655f76c242e445b9f21e0e764a91e23051842285042be74f3b088e36c08f664b359be5ff6","ssdeep":"","tlshash":"f4c08cc4a0cb7e145742691052bf29e4a0344027744cab038cd4d8482e274b4a23beec","size":154,"data":"","first_seen":"2025-10-12T16:34:39.92349Z","last_seen":"2026-06-25T16:56:23.841885Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/ac-chat.js?2.2.1775007331435","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","size":2311,"data":"","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-06-25T16:56:23.804373Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75b8f1b2957ba93ac46658bb6643e2d7","sha1":"4f3de855cbc7438135a354e44ba346e745c2237b","sha256":"c59f7654bfcd55d5c7123fa74e2110656dfcb8c1b476790d4efe784bc6b1e7e9","sha512":"25fd84c6e124e303e7212af99ebb9a169f6efeaafc9ffdd51d375d099b37cc1c2a5acb6ce1442f69827bb01b398d386e78bb9f80b548ef0c1d6a4eceea715ebd","ssdeep":"","tlshash":"2411abfe191ab0296313405e976b79116421a0a9000a584173ccdf9dab9abade0cfb8d","size":1040,"data":"","first_seen":"2026-06-18T17:24:19.354291Z","last_seen":"2026-06-25T16:56:23.835454Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-29T03:49:24.308256Z","times_seen":38583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-29T02:53:26.397432Z","times_seen":40632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/useMarketStatus-iyWaoTXr.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78590b6fb3b787131cef9e86518c547b","sha1":"c6ca716d43ee836bc6375764c8857fec0cb81b9f","sha256":"de794dd91467f6dd47b0d23eb8c1d87d252f8a0c8cd3473cdc4a7f337d953aa3","sha512":"6c92220fe65e8b015e38cc46df336f38d932a21af5538d8fc13fb24a5395b3ade0aff2fca2f91d276f735979e4407529f03d550c6f193bc79256f7f96c0ebe74","ssdeep":"","tlshash":"6b018e27e57870b59c72fcb880315d15815f7b022dedb2b2de5908d157452cf6183e02","size":767,"data":"","first_seen":"2026-04-06T13:09:14.742623Z","last_seen":"2026-06-25T16:56:23.819162Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/en-DHbSMw6L.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c578756e637595db8e749d46879e224b","sha1":"fd73f21f4dce06693dddde5bc1e69a30196bbd5a","sha256":"53bb0b126f12bd035b9b012c3dff242e7d7eea524050c7973dc7a25bf46e797b","sha512":"4f8448675a34e6767cec4c062e68f56b7d53f0d1ca3003c742a1bfe8185dd48b8abd53152083635d4e73eb7755a1a19f4be6ef51fc6c001e1ba72e0c18c679a7","ssdeep":"768:uVtZcEw/oPrZOuiUAtgzUgJ+PmvsYJ8HnxJGu4/HiA9JYOf:5poTZOozUgJzsYOHnxohJ3f","tlshash":"9d33f88dbe164c9a04a3637a78ce6a6120f505c1c355881f5fecc5bc83e2b7367a7639","size":53284,"data":"","first_seen":"2026-04-06T13:09:14.754098Z","last_seen":"2026-06-25T16:56:23.780914Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7c73b3e70a89b16b24889d2b77711692","sha1":"c08c0db4d510a678b7ddff79bded6b7438391e83","sha256":"296a8d4b16cd700d45fefbf3c101b1522e79fce25822ccc34bfb5b7083776ebb","sha512":"16eabb6120e5070e072e676359a144974d58aa725940e45e4b4d342431dd1f696a46c813ad627275e7dcf713f779ddddeccc43de9befd21a98fa9c075fb7f77a","ssdeep":"","tlshash":"b5c08cc4b0c36e102682645010bf38e490244026744c1b038da4e8492e630f08233e9c","size":141,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-06-28T13:37:37.44898Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-06-29T03:49:55.501054Z","times_seen":985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-vue-DiGUWyc0.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c71e858f3554210171fed78e0743972","sha1":"d6b02a6866034afb3db2064c6df1910f8044eaf3","sha256":"705476a5288366dbe11a2076c967413b2367ec5862ae3be5ab603807b807308b","sha512":"5f71c3a27001c44fb421b21691a5d8a1d850e956fd6cd8f94dc5263534b23f9807329168977af1eea01faa551d00c8c8a992280ea206da79e50733fd4db980c9","ssdeep":"1536:HtpPgE/Y2Do8WsbQj5+T/Kjnk+GuxXSEL/7optOulLwpGHRk:H/oErDoxj5+rKjnk+GEXZ/7GwpGxk","tlshash":"d4b309e93282b06263ea19e7007b0016f339194a380e95d4f16dbddb3d7785991bbe2d","size":107832,"data":"","first_seen":"2026-04-06T13:09:14.744309Z","last_seen":"2026-06-25T16:56:23.803256Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c51e92812024c4509b0b6b45c1b9b5ab","sha1":"1bc9d855f1f41e867d29634123b1f9be531c0e68","sha256":"8c2b197ea628d6a693b2a210d4b36df5dc482c485ac41cfad399e525666f6c19","sha512":"9cbd0534837b4b5574955a9af167a4c8c8732741368cdc3ce5f3cbfb827aff177fe0cba09142905f71ded2213dfe8fd8172fc0d25aaaebd82a5b4cefddb591c9","ssdeep":"","tlshash":"4dc08cc4a0c22d101602641120af26e4a024402a70889b128c94d8482e220b08237e98","size":137,"data":"","first_seen":"2024-12-02T16:36:01.409431Z","last_seen":"2026-06-25T16:56:23.843626Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2e4a7e90831c1bdb26e2ce6df106a83d","sha1":"5923251fbec594eeba41afbfac24af5ee0e74d56","sha256":"6fc754e914ddb5d93f11d74413c8e9e0db331bbc04f357c8725c824b496c3db9","sha512":"03ce6da278085fad75e631597676ce71c0e5891687222594a0620581188e4e9b72f649d0262e9bd91c8cbfe1076c492d0b5389df988e74068ff6f79a1abb55b0","ssdeep":"","tlshash":"c7c08cc8b0c36d002602781055af34e99024802bb0489b128cd4fc5d2e230b09233eac","size":146,"data":"","first_seen":"2024-12-18T14:57:20.727033Z","last_seen":"2026-06-25T16:56:23.844184Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-28T13:42:54.095995Z","times_seen":1483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-26T16:55:33.215076Z","times_seen":1938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/info-8jGgH4UQ.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e6a110839fe0206e04108324e0c4d64","sha1":"b1b4c9ae3b7736d63bf38bbe2efb90e722efebeb","sha256":"fece73d946ae1890740daa6bd811c66927b5c78e3eb6a9123ed25ff86a3b9fc1","sha512":"f6adaa688e6853169c02be726f8b19fd40ef5a42c4ed6a6a823994912be77a0461ccf79e4e921563aac48dd1297bde7805b34491c2081900c084e52b840b1c80","ssdeep":"","tlshash":"e6c02b0b0d0243f3023918d033d00e1711a2087c2f834ffc00198e054cf4883901d914","size":144,"data":"","first_seen":"2026-04-06T13:09:14.689529Z","last_seen":"2026-06-25T16:56:23.825282Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b60a2fe4310f25d7824536b6a1e697b0","sha1":"b1b2f5cdda4a1ddbeb01cfdffa9bef2293b692f4","sha256":"92f8551cc981825b303bebbfa6afd1538f69600db62e9723506926b5636027bd","sha512":"5486ea1d943b63594e8c994649e10b25a67945ef222ed768c2a523c2abd5e6f2194f017a8f9119a0da2b9cda115a7a8547c16b1bdbc4d7ebfed2c766114d4baa","ssdeep":"","tlshash":"48c08cc4b0c22d242606682014bfb4e49024402770885b028c98e84c2e220b09233fa8","size":145,"data":"","first_seen":"2025-04-27T11:55:12.958543Z","last_seen":"2026-06-25T16:56:23.845955Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/kline-ey-WXSIa.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42afe409bd8cd43d619b85fc026040ec","sha1":"26145c5eba920769e42b4584d48d7d3974a1ba60","sha256":"8c16fa986fda8ffc42d48f01156858ec353c35717f770d926e35583477177d16","sha512":"2349b075235dd2a8c36d0d686400f2f052e3ef620eb49f41cd64388231b05806abaa9ac1c9bb1ca62f72faa68e5dccb04c18f0e3782742469d0abba4ac12d7fd","ssdeep":"","tlshash":"d5a0220b0ac002f202380cc0a3a88f0a08b00cf823838bf0b00803080a200c3c00ef00","size":80,"data":"","first_seen":"2026-04-06T13:09:14.696071Z","last_seen":"2026-06-25T16:56:23.795276Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75b8f1b2957ba93ac46658bb6643e2d7","sha1":"4f3de855cbc7438135a354e44ba346e745c2237b","sha256":"c59f7654bfcd55d5c7123fa74e2110656dfcb8c1b476790d4efe784bc6b1e7e9","sha512":"25fd84c6e124e303e7212af99ebb9a169f6efeaafc9ffdd51d375d099b37cc1c2a5acb6ce1442f69827bb01b398d386e78bb9f80b548ef0c1d6a4eceea715ebd","ssdeep":"","tlshash":"2411abfe191ab0296313405e976b79116421a0a9000a584173ccdf9dab9abade0cfb8d","size":1040,"data":"","first_seen":"2026-06-18T17:24:19.354291Z","last_seen":"2026-06-25T16:56:23.835454Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-29T03:49:24.308256Z","times_seen":38583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-29T02:53:26.397432Z","times_seen":40632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-utils-C38CGiUh.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dfd7df1ec5f734371b2031fe62061d6","sha1":"f49aa8807560927d34627d4be4b446ab21d71f17","sha256":"692de22154ad87cef5dd773927cacdd5308c688078bbb9fae9691762d9242616","sha512":"42c225788ef8276bcef5bf4d81327020312ebfb18d02ef5f156a00773dbdc7f7d2a76654e58ea4351bb495402aa103cc233b33510c416280a029f5f8c77580be","ssdeep":"3072:0ixNutZvGjzlxvA9GQR92doOkxAzlETkfMT0vH:0ix1nlxvA9Tr2d0g0T0vH","tlshash":"da14e8c87292f06653a724b500bf000bf23dad25b44e84a4f265e8da7db955e9277f3c","size":196654,"data":"","first_seen":"2026-04-06T13:09:14.68846Z","last_seen":"2026-06-25T16:56:23.81368Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-06-28T09:51:12.549273Z","times_seen":1068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bdc665a91ce354b6b29e1440c087da1b","sha1":"e2a5463d1f014bc22029584c8aeb0e264b8d3d97","sha256":"4be21bc4b7d50194efc45e563be8018f241e8948620b38a2c86d596e205aebde","sha512":"512afe3cce7434e775517b216f6cd9bada0c4042df8187442824db9fc27105294161070a39f550c6ca7af711269f882ed2bd40488e243b6ed1d928f6e0efbfe2","ssdeep":"","tlshash":"02c08cc4a0c27e101602641020bf28e89024403674481b029d94dc482e720b08237e98","size":139,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-06-28T13:42:54.092042Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ec9df9a33b666410337704bd726733b4","sha1":"d198df361486f669307a9f500430af5781ec29ca","sha256":"caca11cea1f1ff1eca68caaf85a0bb4b49f19bfcdc242251086ee515cc3bbc49","sha512":"e86f9ff2e723cba50481674e7514202d0198ac7629d8181b722cddb077afc2c5295c6d28dada4a9fd5d4886bf82ccda806c7aacb64740f31a8c643c411143342","ssdeep":"","tlshash":"a5c08cc4b0c23d006a02641410af38e4a0284027b04c1b129c94d8582e730b08237ee8","size":143,"data":"","first_seen":"2025-10-12T16:34:39.988929Z","last_seen":"2026-06-25T16:56:23.84773Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-web3-BVORsuk9.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8aacf7fb5d7b81297ce387ffa193593e","sha1":"7943037bff47e96c265e2d15866217d13a8403b5","sha256":"52e209e15aa260663b19c5a873ae7e9188b512a2577f1625b31ab157452286cb","sha512":"a8c58d34c391e029036feb1c05d21ee03f0ff58674c47e0a934892fa6f08c327c6f6686db36976982ee0f279f555e314f3d93d8e87c4a1fa90ddd23e4764126a","ssdeep":"3072:K9TyETcKLh0JM+IUiRw1pkLjRnfGFrZ2YbLLQMHQe2H/:K9TyJKLh0JkgpynfGz2eLLQMHQp","tlshash":"10641984b552f0700ada54d190b71203f338bd59709b80a4f6bd98eb79bde8d9277b38","size":333417,"data":"","first_seen":"2026-04-06T13:09:14.698176Z","last_seen":"2026-06-25T16:56:23.823698Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/index-DE_N0ERv.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e87916e2aa4899ae6793f970f2acfa29","sha1":"6cd7df119e292b2869480dbe60051c4e10412796","sha256":"23d363e094102b130b609a2e0397153a29c3c539bc54bceba8c26e6ef641a4e0","sha512":"5083aa37d5c4e07ecebc855a12974c64ee36316065d54a7b2bbfe9a16eb93e5c9ff0839ac37b893c671be35b821bab992a112a1b5cc7c4460346a4de3397f46c","ssdeep":"384:ojovmFCPPXYGYCiX+dmn1GJBKxBLvfrvealkUT3ClwqJw1z7tIM/mPB+lqCrUNYX:PO4HwCiXKFJUxBbrWauUT3ClwKYz5h/n","tlshash":"c692f815fc13ca7ae5bb80a5605d109076092feed1a4887af2fe4c061bb5db8670e778","size":21133,"data":"","first_seen":"2026-04-06T13:09:14.694806Z","last_seen":"2026-06-25T16:56:23.818531Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/index-DOWcbQWC.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9fe3d5df6492b4204d821679e66a292","sha1":"8b17c554f831d9fc6695efe3c9204c286ee82a41","sha256":"e58295a98111552640a1e8b2617e549d646029c8229e10b3b00c8d6ac54ff546","sha512":"abae5b27b707635e472e16ad324da0b7b85cde800a2a22a68a35f1a4e4b1d91c8c5e1a16601609f9efb72585c0e35b9968edd495c29ac99fa440441528165248","ssdeep":"","tlshash":"eef04749d4c696f74237388c40341d291b0503d4f7a541f5cd7704fd93200d5d12ed49","size":600,"data":"","first_seen":"2026-04-06T13:09:14.768996Z","last_seen":"2026-06-25T16:56:23.814795Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2e3141b6741f85896e470f695de39554","sha1":"802b71c88e22a081673f7907b6a5859a06ad63a2","sha256":"1ba974e2b96fc98550eb2211073f493e17675b0e2611fa2b41774a5308118842","sha512":"c03196e5663f2a0268d574bf8fcb53aa187ee43f0122e8bcd22c4eae2835e1a531cf8df6df17dccb20bfe9ab51021ca4cf70e1136de63749bcf9fd8c7f9e9558","ssdeep":"","tlshash":"1ac08cc4a0d77d201612a42020bf24e89024406670481b57eda8dc483e620b48237e98","size":147,"data":"","first_seen":"2024-08-29T17:49:52.039904Z","last_seen":"2026-06-25T16:56:23.848353Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/#/home","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b9feffaf88a276be701798d25ec91767","sha1":"67d6f5c6a65090927fe5143dbf6f92f6123e2924","sha256":"2bc6d1c977ab4af73256c49f1a8bb00cf566dba43825851666ac68f608c0bd25","sha512":"156a0089916390ebfc44b5681c9c35ddc19f575c0632264ba3e709f2a88b2b41cfccd8ca8d5e66bd11858cebdcc365bcc17c588577b9e316c83c024965ddf33f","ssdeep":"","tlshash":"c8c08cc4a0c22e001a02a82128af28e8a024806774881b228cd4d8592e620b08233ea8","size":145,"data":"","first_seen":"2025-04-27T11:55:12.997265Z","last_seen":"2026-06-25T16:56:23.848986Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"citihnwi.com/assets/GraphMin-C5cKP5D9.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.079Z","timestamp":1782406550079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/GraphMin-C5cKP5D9.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-707\"\r\nexpires: Fri, 26 Jun 2026 04:54:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 50\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBnlfzxG51FrQj3%2B%2BHTZ9tqrDIL14%2BCPKGVOv6AF2MrdIbRd%2FOUYUNgGrUjNjcPZcWtjzBevVNQJIhRcfCXkmlyIUozpRa7Zzn5ba7xdqqtg8pPN25o3yvvKozzYSXE%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a115808a0be335a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1799,"size_decoded":1746,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1799), with no line terminators","md5":"60515c56c86e6ce7f313fa53afa2349d","sha1":"5a3bdeede8fce026b957bfcdcdb6ef23306570b6","sha256":"03ac3dc61a6ca854bab33f1180e59592975917abcad81b21cf8e1778b35de4a0","sha512":"a961049999cec06b711d065ea229070ef2b6a0e034eb1d673a018fb54930e2f5f378be1ee4da73585d61b28470d7c745b5559f366d4cd69b7bb3149c04b16b01","ssdeep":"","tlshash":"a131b72bfc10907b12319dfce029550a16bd3f6b2563c7d0f98c49532fb9c59b329a18","first_seen":"2026-04-06T13:09:14.713059Z","last_seen":"2026-06-25T16:56:23.764089Z","times_seen":11,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.692Z","timestamp":1782406551692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZbpYXYaM2SIxaL42khbDnJl5TQPF13xJC4qlYtEQWM7GLRaIMlEeFY6HxuiMxTc%2BDs9vRwCf2kuNUiWflXketptR93pbU57jZrVqMv4GwGU5GOVGQ%2F4vlmvXL7LsRT59oyhyp1Ne\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a11580999ed7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":933,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8f37b96dc6840261d40fe1aecd3a14e9","sha1":"0792d4c8e501e4b199e6c5b83972068674f31cf4","sha256":"0ea1f0b662e7d8afe435aa98ccdb744819a5a2ecfaefbb5e0bb75cfbb8651218","sha512":"ed30f000d0863360efd8cfae2adc6b73d49662350b88a97b9dcca40eadfb91d58e47ee7dfeac819dcf53a8075aaabbb62632efd92d0c2133b8d1cf73f40cfbb9","ssdeep":"","tlshash":"a6a02200ac088282300300820283020200f0208c32002a08fe8ee230c30023e3083888","first_seen":"2026-06-25T16:56:23.76481Z","last_seen":"2026-06-25T16:56:23.76481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3950,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3950,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.696Z","timestamp":1782406551696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ir9%2FzCfcLPbjbJjgbZCVGujOZm2VtzfhuL5dRN6HiluySh3avciUiYS9fsa7Xdwi%2F296VJOebcqCorxeEzsvYZlWomVnvZgdE75iBJ3E%2Bc%2BJe2f%2BXUEcjFJ7%2FiH%2FaajD3iX%2FIjfC\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a11580941d57b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":888,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":877,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":877,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/fonts/DINOT-Regular.ttf","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.908Z","timestamp":1782406551908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://citihnwi.com/assets/index-CQFeVN39.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Vn2IHMd5TV6J0boTWhR7YHkLOhwnENB4pHvoaOCvmc%2BkqJE9sWZX19Wh1KfUoQRVEgYT2pEquon7mLMFx6gZxEHCbFdXBGjD2ajUVvYSsUWd2G5Pd0GNSDartZdve8%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\netag: \"69cc763a-b6ec\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 46828\r\ncf-ray: a11580956cdc35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46828,"size_decoded":47580,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"3117fb8bc58475ec7dcf97fc721e5034","sha1":"db9717e9d42e4b84a2851447bfbae69d9e966455","sha256":"c87211b0403e88bfd50c1cd22fe930b294ecb35dca3c3e27bf62180244452d69","sha512":"38d3494e2a4178e9bf543a66d0b4caf5f975dbbf6719ca2b0854653299a80515d06a48a4c96ada4e5d89be0247723027347ba0e8a0a20362c545e1de3187b8bb","ssdeep":"768:SYCwdlARps23lxBus0JEg9vr5aZKSRSW9kzSJDr1LNu1E8c:y8mjxB90JEg9vr5eKEFLNEc","tlshash":"1b234a81b3154f8ec2a2ba3699171392e624be3977e647c7d8b981ff705c1c34d64a83","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-06-25T16:56:23.766328Z","times_seen":275,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.287Z","timestamp":1782406552287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ey%2FWSdoZ7Sqbde8zFZ7%2F5XVsrw%2FQX05jtEFeC4py3vMAFTAPXQATufi3SQBWZ1D7kHUSkNqVCPNqmkPIbIhT2ZLiy2H8ifmobgoL%2F90YnWylJQdvhx8NUnRN1a8YwuygIcQe3FKP\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097ce5eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":890,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/index-DkGihnKX.css","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.098Z","timestamp":1782406550098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/index-DkGihnKX.css HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-58f8\"\r\nexpires: Fri, 26 Jun 2026 04:54:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 50\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v5ij3Blarx6nxJmaStGQRooA5sDnCvsSZHRRbxDyRJyO17htslIF0zQ7UKimpWMCzNGBnKyCIZviH3IDU%2BewUYTuaj17B4nKfGUng%2BGYAW5rQTkGR%2F%2B2UduJ9tnaNxU%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a115808a1beb35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22776,"size_decoded":5988,"mime_type":"text/css","magic":"ASCII text, with very long lines (22775)","md5":"5c0604a879f982e36622ab810502dc3c","sha1":"b59ea686b9e9a1da2a0228c90a5acb3a4a62498c","sha256":"434b42b868899de1f92a6aac220fb172bc57be7b0adcf306a85869712f11be8e","sha512":"b8f3463e09b373f85f9de5542bf0d1c6c57743ccfa8e3d47ad1090b475b39e7752fd79b68a95586c116fe128925f58bdcaf73366f5ae2cf860b1898959785c13","ssdeep":"192:wDS0KZerez8wR8NBLReoFNYO7rwhRloodlwlSEmXuEr1sYeVMJzMYtT+mW0BDhG6:wDS0KZerez8y8NBLReoF2hRuoXuQnnK0","tlshash":"a1a28528b648202cb837c6a57ed05bcce014fe41f2a75dc9a65375224dcf3eb2a39759","first_seen":"2026-04-06T13:09:14.745225Z","last_seen":"2026-06-25T16:56:23.766821Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/banner/1.jpg","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.919Z","timestamp":1782406551919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/banner/1.jpg HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-8d53\"\r\nexpires: Sat, 25 Jul 2026 16:55:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 48\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uR8%2BSmP6hON%2BG6TbF1PBkt4w9ayR7vbtofY5YN4d434ueax0BFkofeIkhWwTsXvIBdXYxLw2JJ1sADgAebVH69kiEqV%2FzETdZ3YI0L0BBRTw78g8cbW%2BP5RHezAYdFg%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580957cdf35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36179,"size_decoded":36557,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 714x400, components 3","md5":"e58429ca30e42c6a30fc2a6952b6627e","sha1":"a9012798d41ee89a4b10fb8b6679a3d4aa36b12b","sha256":"0cd45dd6b5188cf087d1908eda005d6b6face1a3eb9b3c4f2213166a84b87124","sha512":"65de29c1b05a8882ff303a3191f9d6faef6428cd7cf9afbe3048a460971d1476f88a65ac4333c52d12f7543cf35f3fd81385e6b9aeb5f255106dbd13336d2911","ssdeep":"768:16ikoFtGa5F+mlsHe2PTphfS83Cr2yfiAS+dL1Mn2CDbIQY6lskUXZkmV6WAtzH:DLthrp8e2V88K2kxdU2wIQ09X7tA1","tlshash":"ebf2021ba8e0b1d3c65f82787617349f4d07e7057802ad4b37843ba6ba0d771b46e6d1","first_seen":"2025-10-12T16:34:39.842006Z","last_seen":"2026-06-25T16:56:23.767532Z","times_seen":80,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/TRX_20260331213052A036.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.964Z","timestamp":1782406551964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/TRX_20260331213052A036.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:30:52 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GK79JF7fLaJXHHEIjApqg0hj1KZatNBMCDiYJ6dwHqEqnb6J4MsnsV7J5k2NYLHuQLI6gnd9G89nNaV91s9sf1zpsanRJqaG7bSm%2Bn%2B0g4uNH6cTFjqUwD9X7U5hCWEVyOuYAR3T6U8%3D\"}]}\r\ncf-ray: a1158095c9efc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1315,"size_decoded":2177,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"79cbcbdfcc32e9ed14054fb9f306d76b","sha1":"d0fe46ecc0664340d7027500d23cb6ee7b8de4f6","sha256":"ac3824adc2a37e25d5e63fe30c4de623c0985730450f3e12b58bcc58677d107d","sha512":"98eb00b634f4214e5d546aff3c51c6e889a337ed9e9a59d96b2dc189bb822352d01d2d53e02db22255c2c3f44836ce30c52c8e22199eca10c8e431d17560cedd","ssdeep":"","tlshash":"1f21f8b87b5d652cc209c890e8364aa77098f9ae0512041e3830ec3dfee098be2567c3","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-06-28T12:56:58.894269Z","times_seen":1058,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/enK_.gif","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.001Z","timestamp":1782406552001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/enK_.gif HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/gif\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-53921\"\r\nexpires: Sat, 25 Jul 2026 16:55:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 48\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cfDqiOJusTMYbowI48muEz8miSNZ8Bt9BI8sUbk3QAB8CKM0i%2B%2FU0ybiG%2Bv7Cc0RbWjGHCMH%2F6RJW8xiMFRYNixtIQy9e8zuEmfgB1Kf%2FySyHuOdjszwxmhrZ8yvKag%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580960cfe35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":342305,"size_decoded":311555,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1200 x 800","md5":"0c213c1a489e987b78d7328cfe1bd840","sha1":"41e5a53e41ffe0cc4c99e8e98e0eb750117e9d18","sha256":"a4594eed78ebd1cb2ad30a28e026fad3c9046ae5b1aa71dec4c6b9702c12bbf5","sha512":"4da3afc8eb4803cff493835c4cc85ab57fc816f70943978e502b55736ada97b1858a8f1b1a6e65f150d266f1c42bf570ab441e951217aee4f2801a1262e3118d","ssdeep":"6144:2E/igWxC6ej+F9A18h7+Zxuvve8n37lm4Wl+DVAXQbo/N2mAbwBI:5/igWo1j+fA107+qrnrlu8ZkN2mtBI","tlshash":"da74021ed12702b19d3f1679f41f5ac8295fa92c05323e278ca0b5e64a4969f39c4ecf","first_seen":"2024-10-31T21:21:10.450985Z","last_seen":"2026-06-25T16:56:23.768699Z","times_seen":196,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/ai1.svg","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.005Z","timestamp":1782406552005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/ai1.svg HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-2d31\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 49\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XS5brYXPLHACT5eq8xvvymJFLBWSef4sO1UIrtUkg7xbQ2ngOa%2Fs49nrK9twWUQhMnPfCAHDY4%2BdEc93sgYDbbBuOcj8gHIopeCueJ1ez%2BzF%2Buyt0Jkfe7JOhlyWF5w%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580960d0435a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11569,"size_decoded":4359,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fad7f348370ad25512357d8c7c20b3ac","sha1":"a451230898d83bb5a76762e1f4bdc9deccf49462","sha256":"b6501107cf61530810ec864b8d58f3ec21275ffa0467d01a7a969663588158f3","sha512":"1510f8c8cf0d9c49b23035370f90fc58d88300d3c649ecc29b8454296f967c16e6cc8339eeeaabbd6e6cfb1c9cacf26d48d06b41d1351070bacef700092aeb91","ssdeep":"192:oreDaEOJ8rpKaEJtym9iiSEYrydZm94rUD3o:oreDWJ8rpKRxDS4YE","tlshash":"4132742ab3aaed7af140d3e8ca42c035215556e37641d1a1c6e06f6fd8201cd1a7fdcb","first_seen":"2024-10-31T21:21:10.384677Z","last_seen":"2026-06-25T16:56:23.769392Z","times_seen":169,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.034Z","timestamp":1782406552034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:57 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xJLNyBx5OGJTC1%2BjtvGExPBN4vUNzyM%2F5F1JYBEib7td4I%2F2JfLZq%2BnV4bfxISfrY3iExKWEjW5o1VnaXtV93K7mv5G6oBtHiqUl8oUAC9e5M4kIsG31%2BD%2FxAvAXxP5ncCAgNRT4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809b2f29b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38435,"size_decoded":11573,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"821a095d907b6faa9d2e2212a33f439d","sha1":"b33081a4a5c0756d19994fe1962e7c05da7a7100","sha256":"00b0cd8534cd0b97b63ff094d1dae0e634f0964713be19559d872128c58f9665","sha512":"9ca9853f35d48049398eb481ecf72deb74408fc3d940e69ee31d58a2b4c4f10f65d3d10df0d62e59baa61e84cf6e0e4e22dd8e15ad382e16d9db85e269dbdb0a","ssdeep":"384:UT6dSJ7kLGAfof+6wmxiTiE9R2rJkGKeHuw7R65RXT:UTH5YGLW6wmxiTiEIdHuw05Rj","tlshash":"af0308309a99c149c431add63fe3aeb0bd1276c38bcd7c02458d5c1cfbd766aa619386","first_seen":"2026-06-25T16:56:23.770081Z","last_seen":"2026-06-25T16:56:23.770081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.280Z","timestamp":1782406552280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nI3nRJGh5SFoO2WON1cFVmbjj8epgrD0fUCimMFCef%2B%2F9w%2FpBe7Eh99bVNOFTGBeWAwTk9SV7%2FKnYfAGxnwBQn%2FnfBXWe4HWJ3thdmdeLNng8Kc%2FiJ2pRUqcmfyYHfnmeWnJ2o9c\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097ce55b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":894,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/index-C5WetoZW.css","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.092Z","timestamp":1782406550092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/index-C5WetoZW.css HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I1J2dzFnV2fehaC9bUxDd4neaYAOcLMeZO9oBBeru%2F0Ilb1WTSzfWab8YGs%2FYrpW3zajfNNLU7nRIblm3TvMoJjW957QHfBkrmcqCWki%2BRGf761PwKMD500FMhFWRu0%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 26 Jun 2026 04:54:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 51\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69cc7662-240\"\r\ncf-ray: a115808a1be935a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576,"size_decoded":1076,"mime_type":"text/css","magic":"ASCII text, with very long lines (575)","md5":"10f020047ba9b59b60be4ee537a34a2d","sha1":"970c7fff52e828d36101bc2d291b990ccb44e1a3","sha256":"ced530f5e948222f661e64d71753f15005de73634775704262b15d4974cd6725","sha512":"15ae77431c399989597366570ed116bf9724430e9c3a74d607cb08ee0c7443d385d23f3d8a891b6f41813667efdc56dfc354af49dd95b48e18e7fc707f3090b8","ssdeep":"","tlshash":"07f0e130e7ca412d3433da9a2aa02f9c902c47e1e4e6cb3595233a2de8d30d71271388","first_seen":"2026-04-06T13:09:14.741152Z","last_seen":"2026-06-25T16:56:23.770969Z","times_seen":11,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/platform/axendra/logo_144.png?2.2.1775007331435","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.421Z","timestamp":1782406550421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /platform/axendra/logo_144.png?2.2.1775007331435 HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-506a5\"\r\nexpires: Sat, 25 Jul 2026 16:55:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 49\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBZ8ur0ftmdVhXxqMILJt1ZhR50G%2B%2Fklp%2BPRq%2Bd%2BuK%2BzGiJ5LpwRWn4hl1AXfHHxVWfNObauMO%2BgVsPgcA9XLEZVrL4K6URp8LCnna64xL3yik3VqmvNuf%2FKxGXMzhw%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a115808c2c1935a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329381,"size_decoded":329776,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"acc9bf2f9e58e46707e41999142af60c","sha1":"3babcd15e9b45e07665a58ad7c2677d0610badc2","sha256":"dd9f3b9975c3bc7bc75dbb5156a3f26cb7a3492de70c8aedc3aa537b6d5c0283","sha512":"f8b78232c648160a847257abe46e4b6d3603a46d58805093d0caf7a9fb33734a95dc5da6161102f419d589c4898837d61dddeb85d433f94bd82085f08f53c4f6","ssdeep":"6144:RdrSTHQjalXNX5UjE5TowU6buk18mvAW9KWclYvXfAYPoEJb58E7i:TrSTHQjaBN5FfUA184l9lclaXfBr8r","tlshash":"836423f6b2fd8f21fbaf1302f3b10e7162755b706be118a6721aca51c4196321be1d08","first_seen":"2026-02-25T17:49:59.548689Z","last_seen":"2026-06-25T16:56:23.771522Z","times_seen":38,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.294Z","timestamp":1782406552294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6GDkl4OW1dJLUH%2BYOHlUN43XDUxl2Hs97bDHvOIxq07rALhoH43LyGUKvPHrwB5SPvZXYo9V%2FXwN9AcXOCNWHsa5ujAw6loV1cpxV%2Bklk37oKX88zbjYGcaHz2R9E%2BT6hEEGE2ZN\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097de6bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":890,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":4230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/spot.svg","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.924Z","timestamp":1782406551924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/spot.svg HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-59a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 47\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0cjgst6OLzBJF8BAbtYX%2FXiHfXsaytxtLjWd4P95ht6pwYMJpBTDesLILZ52wfWr6KVOdqk0dBw1EKKQCN6bPbv49j4yumjOYwwErWTVbdG%2Bafl7syXYCTLYJ8%2BYnI%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580958ce535a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1434,"size_decoded":1468,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06ff7119039a86ea843fced4a87b0c04","sha1":"acf0f480f5288cc094e99382bbaaa21b9949135c","sha256":"f72d9dfe237a308134226955b517b808c348468794ccab477bbf478cd1c49007","sha512":"30b10c415d76e26ff9105a1803919314a81a3234d1254f3210eefb9e98ac35bc52ecb242a7cc2dadd1f01ebb3a0cf4bd774e6cba135cb89fb416560c18c8b58a","ssdeep":"","tlshash":"b921e0bf97c536d0d56beba0d8138022f2b7647a3b2c8b854e74cfda530e059c8d9460","first_seen":"2025-09-28T11:01:39.207607Z","last_seen":"2026-06-25T16:56:23.772094Z","times_seen":81,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/DOGE_20260331213037A035.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.955Z","timestamp":1782406551955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/DOGE_20260331213037A035.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:30:37 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CCKwoC9t3JXFHkpK2E9koG14NqqaciWxKbGjls8NKqIEelmQ4aAvXpGoLU8vgpFDCC5JvRbvu9U9IpzOZlnm0Xl1TBdrVeL%2FxnxJn3%2BVyDfBZ5ILFrdcsAfMqQZUvqD4EAFH9yroOvc%3D\"}]}\r\ncf-ray: a1158095c9e9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2808,"size_decoded":3670,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-06-28T12:56:58.896164Z","times_seen":938,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://h5-api.citihnwi.com/ws/bbf900b5-ee80-4de9-a14e-151d10b73f08","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.050Z","timestamp":1782406550050,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /ws/bbf900b5-ee80-4de9-a14e-151d10b73f08 HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://citihnwi.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: EhQMony+oE8IgXYqCSdC0w==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Thu, 25 Jun 2026 16:55:56 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://citihnwi.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: O8Cptx35taNHTSRC1hn8eLHDxz8=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6G%2BZgfcNV3ispvWAMV7nBE%2BC%2BKzuA0f%2B8pfTwXme7pCHukNd48muiFdV4eh6VAVKXTkEW%2BG%2FNpXW8%2BG53KXDj1zHBYl2vj%2BMzjtnMuPqNOUAUwOM2KHFVwCNU%2FD9tXZ1AdgCOrIz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a115808a0ee45fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1256\u0026min_rtt=1059\u0026rtt_var=791\u0026sent=5\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=2861\u0026recv_bytes=1331\u0026delivery_rate=1419795\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=9fbfacce3a4ee67d\u0026ts=6443\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1086,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":6482,"timings":{"blocked":-1,"dns":17,"connect":19,"send":0,"wait":6435,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/BCH_20260331213429A039.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.972Z","timestamp":1782406551972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/BCH_20260331213429A039.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:34:29 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 48\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AqWFGrftsZWlGbN9K1U5MboI5zEys7LwBDou21%2B6HxpS0X6RhknwCXJbYprrsfoyczP3Ianc6mjxX7pmbo7gjPkNihQ82oEmwCE7MzeAtRhEeFLZbv%2FuBNPVUJKAWUDfLPkDOhaBkjU%3D\"}]}\r\ncf-ray: a1158095d9f8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1218,"size_decoded":2080,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d34183db66626408066857b67f7900d4","sha1":"83c65e97df3ff99ddc360cbb4f00e0aab9b46157","sha256":"c62e4c60cffc895ab8c244858fe3e536c8951cdfe3424e5af1cd6d92dd796c8b","sha512":"7ee53dd7c95dd200c67ef1a94d0a658cc28e6681bb7e9b80f25eda71cd907a57f11cba0074b512f7c554ac84364439cba30d0b0706b1d2e0b0d102fe045b5d05","ssdeep":"","tlshash":"6421e7a0a34da662fa3b2945e79700f0712a5431a90659974af74124c21c9462ac057a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-25T16:56:23.773203Z","times_seen":275,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/ai3.svg","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.010Z","timestamp":1782406552010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/ai3.svg HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-1baf\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 48\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w0dClMANeC088suzG5h4TXKaf6XH2rq%2F47CVAZd79ogc%2Bd8oqOrrr5pRBaDWLEiKxPAojOywyaeP714E2L7eKcAGA7L%2B8503SUkocT1QTvsqoxTTh2EBoVGlORolIsk%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580961d0835a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7087,"size_decoded":3322,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c53e7b1117a8526f6eb229df446cc722","sha1":"bd13b10b3d466c27cf406fae1a07adb3650dfd9e","sha256":"05d9270b980c401bbc75d3374fc10b459f661b3f5420d168daa5369d8fc8c48c","sha512":"0e693efa9349078257f94a89a7acb5f3d892ceba824440516c2c8fb88b71e937923ba1bd10b020d9cf2e80985fbd5f0ddefbf9176e6ad341a17caf9dfc7da856","ssdeep":"96:UN24KuLu7W0X/YIRcOMlit6YO+0hR8Kob/RfZcPRDg4rQA2EOAl6NkNLW4nW/1do:skuLu7CLOMlit6tvhRLlY5o","tlshash":"17e1652ab3aed97af148d3fcdb008435716640e3a951d261c2e5be1f982509d683e9c3","first_seen":"2024-11-30T14:01:13.939903Z","last_seen":"2026-06-25T16:56:23.773717Z","times_seen":144,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.052Z","timestamp":1782406552052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:57 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7LFHt9PXggb9FWRGHH0jwZApM8WkKLad%2BKHrMjV%2FOaoi5inYnkFUcyaKAtOe30f6%2Bo3weTWO1yd0TuC6AMLWQNyabTi53Kh1wZQkNstwqe5tgIn%2B2s2EmnhKMjYQh2ZXFpZ4K0n%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809b2f2bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39832,"size_decoded":8409,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8c2de67c2e3a3bcf60acf7f47a442e20","sha1":"cf33cdc2c61d1bba51dc171cb3fa2f8f82fcb78f","sha256":"c1000f82843bd714938d5ec36ce38d00733f8b960857a465c7f9e86d985b4522","sha512":"3d13d4ffef027a3ff8cb4fb3ac1ac272669b532af6a72ef8df43cee3a2499444eba1a1d8c1fdd0e4ddf1a5b7a98b2cee0c4786798e94657b74090af1d64db3ae","ssdeep":"768:ODo1DAdIDQyWD7BA8QDTnFyWD6yWDbLX5WDjyWDqyWDOy4yJWDS5SD6nyWD6yWDa:ODo1DAdIDQyWD7BA8QDTnFyWD6yWDbLP","tlshash":"a303baf448b8c2d8e9b57cb92f977ea0850335c34bceadc3454d8c0c7d652daa2593a6","first_seen":"2026-06-25T16:56:23.774403Z","last_seen":"2026-06-25T16:56:23.774403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.277Z","timestamp":1782406552277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csgu3jSo84GR%2BFx99qwdUIhkfr32pIdJOw62%2FjKx1gNsVW2EWs9y3Xb0ML1T1bvLiEc1TdnRWyEUKXBJiFhlPxNpDRWfQi7TwxQipwr%2BxzUGvO3lLrS%2BRWkEt5IedNn5Hhz65VJx\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097be50b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":890,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/svg/dark/notice.svg?2.2.1775007331435","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.920Z","timestamp":1782406551920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/svg/dark/notice.svg?2.2.1775007331435 HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-76a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 49\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wE26ziA4RPVzEKwIBwrQq%2BDF600Sq1%2FuM%2BxiDLSIHAQSYDqBunDhfM2Sh2XQzHOWCz%2BCNmL7z2Ydfs16u612DKJQnG4MyoFKkBjgKXwvyNuu%2BWGZ9Tx4ejkkNrX94wc%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580958ce135a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1898,"size_decoded":1752,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f262267496bf86de09b562db82a676d9","sha1":"a9163b950a68f56705da45159ba44533507505c5","sha256":"8c02636fda22906716b1b028e7dfde4a436cb95da0029bdeac8e201030f344a0","sha512":"c9bda0880dbea6da7260578858be5402c6a62d85cb8f8639f2313e02f7fda87ae24d05de9b87efb86dd1341dab2165b9d90524dd44d2d1938b25b63a2e1a6c6e","ssdeep":"","tlshash":"364175c659f952e4f2cdc320d6a731051e6a747730e1026cfeeea5656b308f90f8e049","first_seen":"2025-07-27T10:32:31.414438Z","last_seen":"2026-06-25T16:56:23.775415Z","times_seen":110,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.288Z","timestamp":1782406552288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uWk5Lbx9sUXPwKRx668n%2FSQH7YHHYaSvR03WDbdNdRGG2owaSGnRC0LQDVVd3zbc26uKiW6TJL35v8XFVMJlPkUS7LNxxL3zLhb6boZgptpMoNtDZRdk2aQFrAcBxHN%2F7xI7Rh30\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097ce60b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":886,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.289Z","timestamp":1782406552289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1gWXZQ4pb012ZdDRDW%2FH9gYzViuZAuv3e13EiQo7XS3mBF55tHY%2Fx7RjbB1oRQI11u1qPMJgxjISnD5JuNr3cjJutWPtnzgrAyaXZoS%2FBgs2MMP%2F8sB%2FqVZPyu1d%2F%2FIGddBHfeAa\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097ce62b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":896,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":4237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/cfd.svg","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.925Z","timestamp":1782406551925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/cfd.svg HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-4e6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 49\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F869K9M80XHENJLerdm4whmpGIHkeAqwYpOBSuyjuRlyb8Jv75mOoMG6V40uwX4jge3bwL7rjtvYAQVmivxOAp2N%2F4viTSRDXHZ2VEUGDtZvy0jsh9kD0aXC%2BAdoxNo%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580958ce735a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1254,"size_decoded":1432,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9115373205114c25f64dce056a8be78","sha1":"13d9c2d8ebedda0987493bec5ce299632f7acbab","sha256":"22269448e0257c0fd850d7c54387dba3d5db86bd4f3bbf651038653801c74a05","sha512":"399719ccaa22a2f3800f0daf2a973abdbdb84b6a8f24f546d49012362852772865eb78c94870511816b777f0354a9d1a291b39737ecab05f77f4cb322647464a","ssdeep":"","tlshash":"0821325b7386f190c5475b90c463b1a230e975faaf04c1958e49efc5a20e0bf48ceea0","first_seen":"2025-09-28T11:01:39.572211Z","last_seen":"2026-06-25T16:56:23.776083Z","times_seen":81,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/ETH_20260331212619A029.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.939Z","timestamp":1782406551939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/ETH_20260331212619A029.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:26:19 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIwYoXn0Cw8l7KZ9d833%2BYmG0NdG1zbei1gaJTp6t2g1zho%2Flp5toA%2B5hYOpOy8w67ZGPdV3qXvfUH5lm93k0wVtjBIjWSqb4G1afeNoAXNEi%2BxGQzdfK4%2FOi%2FmlfYUcNmaO92tuzAw%3D\"}]}\r\ncf-ray: a1158095c9e8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":1968,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-06-28T12:56:58.889899Z","times_seen":1737,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":7,"connect":21,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/KAVA_20260331213557A043.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.980Z","timestamp":1782406551980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/KAVA_20260331213557A043.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:35:57 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pn3diI3HyimDbaLhBIQ4oPkoP632Sq7epL8i79DXzjFEtPHZrqtGa4bhLk0E%2F3EfeugdZnVSBnfP1Hv15832ivvzZ5%2B1GWX2FgC92P6%2BTKBqyBwwnQL9xxJSGKmszBggFuAem%2Bguk0k%3D\"}]}\r\ncf-ray: a1158095da00c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3944,"size_decoded":4767,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 4-bit colormap, non-interlaced","md5":"6ed2f60e93443938723cb19850f3a810","sha1":"084c0617960a9ee8c044aa3b7e7f5b33041bc3d5","sha256":"ae194621779010061ac29b2f7a54e1d6e37658ab190acbfcf8d46f5391c2c0b8","sha512":"256606e0422409a67fb5cea2b7b35c205712885b4b180861887aa205321ad9135a114095e163cd0fb0f9ec18742680cd35467d4e37e5439cf24185e351effaf4","ssdeep":"","tlshash":"e1816d28744e7d7b4bf3d9131b8555d105d5e630883b42be1dc742cdd3f9e884a8e848","first_seen":"2025-07-06T22:01:43.355571Z","last_seen":"2026-06-25T16:56:23.777328Z","times_seen":143,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-i18n-CO1gAzaB.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.850Z","timestamp":1782406549850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/vendor-i18n-CO1gAzaB.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-f7e0\"\r\nexpires: Fri, 26 Jun 2026 04:54:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 54\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHV2H%2F%2BaIN4WB18tUHa75dJTCS5EKcX%2BCFBunhfP1NMp0oeKbXNcfNBiyntpaWkW2W6NtEvMsvgpGhRlckfg3N0bJ6OYWrjUNCweSRzUEduouiLFNd3FqClvWIjpf6A%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a11580889ba435a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63456,"size_decoded":22768,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63452), with no line terminators","md5":"fa23956003665fb4706bd6ab1f3ec34f","sha1":"45f4a0ce6a8f4b5f64504f69c03298f9a1c3cf5e","sha256":"66152b4075991d98fa94631308eb2db44152d87850ecaf7ef573304ce693235b","sha512":"668c23c4df75852dba17daefbcfac8ee1413f201fd7021460378024caf9f6e2451765f7f4457e8e4e36bf9359e314adf311bdde9c9ec2dd8002a254bd8d5efee","ssdeep":"1536:hHArKrrLeYWvXibPWK4VFriwmubW2gchMAUaXvJIasT:hgrGL037VFufuy2phMpsxbsT","tlshash":"e453e8d634d7b016937a45f660b30116bb3d1a28780ed994f1bce9873d33d6a82a3f19","first_seen":"2026-04-06T13:09:14.749676Z","last_seen":"2026-06-25T16:56:23.777996Z","times_seen":11,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/index-CQFeVN39.css","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.859Z","timestamp":1782406549859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/index-CQFeVN39.css HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-be25\"\r\nexpires: Fri, 26 Jun 2026 04:54:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 54\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c189lixzfpYV36BBbt9FoGdT6s5xwJe4L4exGvfjFRmYPn3GvF9a6IMfSprHD%2F4xJDEC%2BhzPvSE2eUyHs6YeEPWvBuoTUQ%2BwJOhWwr%2B9GBFq8FZPeoCIORME3fl%2FOlg%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1158088aba835a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48677,"size_decoded":11435,"mime_type":"text/css","magic":"ASCII text, with very long lines (48676)","md5":"020816a90d9987ce8e78f823f315d7d8","sha1":"101964563ca507cb03191d5f92b1998bf7f5361c","sha256":"aa1b5d2be913ab52ba6250f67e6af9854dd0cfacf45f8dad3858f95996684bd4","sha512":"2f8c9cabece017fb606063d19d864fc015dd6fa9ab978cf4db8e771525614a3095d0ff6768f6639bbb4e1eb67ced8f4a5b4e9791e3e1de49a5570b5c0914d940","ssdeep":"768:nOVmBU9eqzLE7+HnTdp87ZmZeZKZ0ZoZJZ+ZkFlJTXV2Ru0gvAscFvG:OEBUVZp87ZmZeZKZ0ZoZJZ+Z8TXV2RuP","tlshash":"5823b910f244203a753bc99c38d0a148d224f5d2d2121fd8f9eb15956acff8a6f7a6b9","first_seen":"2026-04-06T13:09:14.753217Z","last_seen":"2026-06-25T16:56:23.778541Z","times_seen":11,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/fonts/Arial.ttf","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.965Z","timestamp":1782406549965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://citihnwi.com/assets/index-CQFeVN39.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: application/octet-stream\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZYC5DpSMjgd2nROdx%2BF0B%2BenuRexgagXUg4ZjRb6N8vwbPOTfcWNdSt43HgVi5qo%2F8ksq6jGHdGbz%2F391LsZBETWcbX8cQ85r93eB%2B7UZHnKhZMjj4XRu7GayJL7mA%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\netag: \"69cc763a-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 1047012\r\ncf-ray: a11580894bc635a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":1047775,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-06-27T22:30:25.082217Z","times_seen":1956,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/XAU_20260331212859A030.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.996Z","timestamp":1782406551996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/XAU_20260331212859A030.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:28:59 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vaMgQpwtyBlIDmi2mZXb6UOgrVgUqG0iow4YOP8wZpL9btQhw8K7qJQsATmuCxAC25YA4sCk3H8OpwysVpGS0dsUTQIuEuEkWJO%2BH7c600jytbWxLpf91Nw2AQPVCICjJHLdXiomswQ%3D\"}]}\r\ncf-ray: a1158095fa07c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3863,"size_decoded":4406,"mime_type":"image/png","magic":"PNG image data, 175 x 175, 8-bit/color RGBA, non-interlaced","md5":"c28396c9823cd099213ff5a9edf61b7d","sha1":"c3bbd2146e159d82afe80a7b58a45b5d7bf95961","sha256":"bdfea8d456f5d1bdfa378845f364fa69dbbae838dae6ff60a1364b4c79756e03","sha512":"cd278fbcaa5e75454d90e6f790296b386760d8e0c13aeecfd22d9bdda11a59943f618f28a90ef7f6911f936838f56bc86c8e1ac3ceb6a53a9e946b296c6820bb","ssdeep":"","tlshash":"2e812abe086b6c59a9fcbd3154f62c9174f205d3cf5a90132d91c325ee9670e4bab00d","first_seen":"2026-05-19T13:29:08.689133Z","last_seen":"2026-06-25T16:56:23.779784Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/chat.png","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.013Z","timestamp":1782406552013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/chat.png HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-279a\"\r\nexpires: Sat, 25 Jul 2026 16:55:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 49\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wDY9LDtmzlPmIuFnd5eIrZ%2B310uTJ9qwYWcnv5nKVamFnMnhrcgAevAdKAeyhUmPtaG4aMI4YcYVVcZliYeiXzKNuV%2FYiLFG0bBmfy5dL33zKUHT43jCIH6rENPgKI0%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a11580961d0b35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10138,"size_decoded":10939,"mime_type":"image/png","magic":"PNG image data, 391 x 391, 8-bit/color RGBA, non-interlaced","md5":"c0b8583d102ab70eb5a9cd4e1ac47c2b","sha1":"ecc2a351a680d2c01b7070b167755e1d9c088de6","sha256":"33123e4b44608f7db2cfc5dc0e6d0fcf0cb06c5e8ac056a637e43dc79a55c407","sha512":"633def91d6eea6f4d338b49bc2d0540eadeb278b6510c824d8e2edd6a0d0bc6f205639cabb5db6bed89d6f7bf1fea63a51f8d877cc0592528b288a6e37210207","ssdeep":"192:LEJaISqTHLkndsrQKyeSZD1sOikJbazA0PkQJprNKIOqJPj9TDiXVLJxkK5DX:LIaI7HwndscKy3bziObazAWkQJPKU1DM","tlshash":"b522bfcd558e4520a9e9203191c6631adf38e9ac7a5bf6a1fc31c4c553a2ce2e74b618","first_seen":"2025-10-12T16:34:39.749254Z","last_seen":"2026-06-25T16:56:23.780345Z","times_seen":81,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/en-DHbSMw6L.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.714Z","timestamp":1782406551714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/en-DHbSMw6L.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-d026\"\r\nexpires: Fri, 26 Jun 2026 04:55:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 50\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0j9unHz51aZpslJBpyh%2FrthLccyDHitTqmPeZWh0yk9Xsxz0xbxWRKGWTj9URdGtY47qsTfidObQ8QQwUiHHCtVBqiIVUFQ2zBZ1MGvVxG26Sf%2FjcMMKNcsNeit%2FgUk%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a11580943cc335a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53286,"size_decoded":19950,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (53260), with no line terminators","md5":"c578756e637595db8e749d46879e224b","sha1":"fd73f21f4dce06693dddde5bc1e69a30196bbd5a","sha256":"53bb0b126f12bd035b9b012c3dff242e7d7eea524050c7973dc7a25bf46e797b","sha512":"4f8448675a34e6767cec4c062e68f56b7d53f0d1ca3003c742a1bfe8185dd48b8abd53152083635d4e73eb7755a1a19f4be6ef51fc6c001e1ba72e0c18c679a7","ssdeep":"768:uVtZcEw/oPrZOuiUAtgzUgJ+PmvsYJ8HnxJGu4/HiA9JYOf:5poTZOozUgJzsYOHnxohJ3f","tlshash":"9d33f88dbe164c9a04a3637a78ce6a6120f505c1c355881f5fecc5bc83e2b7367a7639","first_seen":"2026-04-06T13:09:14.754098Z","last_seen":"2026-06-25T16:56:23.780914Z","times_seen":11,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/LEVER_20260331213615A044.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.983Z","timestamp":1782406551983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/LEVER_20260331213615A044.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:36:15 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdtcEfRS%2Fo3ZjqGmE8PLYnBW4avHoKXiY4Sg16I3bZpBWvqCydeBe9ihL56LAV%2BKIZyYTXHU0lD3SdBZkT1qf5%2B1E3KEipo5SYuqN9eTj%2FAkTNQy14KpI0LEbqZFpNOmXjzjxARH0Cg%3D\"}]}\r\ncf-ray: a1158095ea03c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9071,"size_decoded":9888,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"8e58a9f8123ca37a3107cc590d8913ab","sha1":"0ef0062b46e2e8df6df2e5aed52bead1158508d5","sha256":"01a100a2bf7ed08f9b3415c37997440e2203a2adacde6daaeca46356ae1a72b8","sha512":"c998ba87bc80953ea916be47d5a260befad7522871fe72147540125cfd337c35b55130513e7d1ed84b0c566a84514c02c0e204ff7fda9fcca929d9636c5ab4e0","ssdeep":"192:NPEg2TyU3dXD9CP/iLevd2RZz6lFJ2S8QO8KVEtXQSSJ:5EgpO9W/1FwY2SIqNg","tlshash":"4e12bf546f389eec83daf28a57c9621683b5264d722b681d739816308c924995a3cff3","first_seen":"2026-02-25T17:49:39.109706Z","last_seen":"2026-06-25T16:56:23.781556Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.044Z","timestamp":1782406552044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:57 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KQ3WNick%2BSruiCWWeQ4C1qAvs%2BdiNPlsgOhFvWG3x3QpB%2FpKihPeLJ8dsJWMVuabaeRx8QeeamTI0BlG4ZGBckrvwHWXLUdEivtfVDCeN6qRK%2BJSxFamAPxnas7fRK3RkfXSdsEL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809b2f2ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36561,"size_decoded":11772,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"667a15811dfab608365b3a4efebc8c16","sha1":"ff765dc07f6e9fdc6e2818463d421e1211844ed4","sha256":"6da35be9eee6d97c92b4b3856e35489b9de6574fda4b0f3ebd473bf2114d4a41","sha512":"b49c4852812e853c97f235f5f13994de3c54184ea8a8191438b99cd46df48eb476c471cc2a904510a7bc4442d7a591c154647a61356cc7186549d87449226122","ssdeep":"384:cQ+SqBNP9ogCkf/3RH2FeWPCzG/K0ZdDzlJ8i/jnHRA1p60u1E3LmpClm1t:6zosBH2FRPCa/KEdDzlJ8knxA1U0u2W","tlshash":"36f29db0bbe8809ad939ee964fe3ecf18516b3c703cd4c15719e85453ad523fa128782","first_seen":"2026-06-25T16:56:23.782372Z","last_seen":"2026-06-25T16:56:23.782372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4440,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.986Z","timestamp":1782406551986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9XG1cgdfEguKRQbJC8Tl1Ai%2FD1edot2oZBCuhSHisUdyHca9E9tx%2FbCYPBhtwU9vrG12JLW1N4Fs%2BdDhs%2B7HpASRnZ72i6oEWGhlgToaY0xcyY7MfFCtnRkZao0BtPCEcRMjkLD2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a11580999edab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":611,"size_decoded":1285,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4fdd20e593ecc827275b9faf37e46d21","sha1":"c57f3418bd334e184c296db12dcd295968bbbaa1","sha256":"09dd8e288edd1ddc204ab394fe019dc0c53d329c1c57393c4a7a4b789f6a9f7c","sha512":"abdd9d160c516c665779e8b98f72e1817777867887dd45f41dae161ad1dee2e486b561e3730e38fdc5a0e5d69d8110147a4c0a98f0a79f264d6933a18eb08dd0","ssdeep":"","tlshash":"cef04c0e54b89eb908095ec761ca7dc995ae2687d660cc34aa6fcf2d81e157b2b1710c","first_seen":"2026-04-06T13:09:14.775817Z","last_seen":"2026-06-25T16:56:23.783697Z","times_seen":11,"resource_available":false,"data":null}},"time_used":3952,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3952,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/ai2.svg","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.009Z","timestamp":1782406552009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/ai2.svg HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-8462\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 49\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vrLWYOTqXZeFDq5eB9scd8AskZYGadZNy64FiGiEe2e3uJ6juYJLbuMtVQDcBizREJOawhH2wfj82LkieMKvJqYF0XjeexLFCE4kNZPI9I2D9WSooOk1vBxLxp%2Fe53A%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580960d0735a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33890,"size_decoded":26573,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c47b527cb50c44f791e4c1bdb582c296","sha1":"b9d5e0c2a1aad9aa06872c84bd6c1ed50328bca1","sha256":"be31898c9ef6b0f26bbd66f381e89c250d44dcd5e7fe879ac913c3cbd9fe5bd4","sha512":"3c9087d90c856f7440339fa714c342e2583abe629991c6da2e1a8722b8ebb81e41f1fab72f693c069f7eed9566efb88061b35ae3da59b0d44bf5389471f46a6f","ssdeep":"768:b+F76xoi6BmlUAOAzlshwrePeuvj3ubsaKkmZD:b8PRAzlshwqP/3ubsa3kD","tlshash":"95e2f1aeef52980be9560ff9823761f113fb0bb604970c26967067c394d83b8355b49d","first_seen":"2024-10-31T21:21:10.414612Z","last_seen":"2026-06-25T16:56:23.784402Z","times_seen":170,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.qprchs.vip/profile/upload/2026/04/21/9_20260421214102A010.png?2.2.1775007331435","fqdn":"admin-api.qprchs.vip","domain":"qprchs.vip","tld":"vip"},"ip":{"addr":"104.21.93.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.023Z","timestamp":1782406552023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qprchs.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 05:21:48 GMT","end":"Wed, 23 Sep 2026 06:19:14 GMT"},"fingerprint":{"sha1":"9F:28:79:DD:64:CC:7A:AB:9B:66:AE:FC:CA:68:0C:21:39:5F:A0:05","sha256":"B0:E9:6F:5A:6B:C1:5F:B9:B3:8E:78:BB:11:CA:9A:1D:68:6B:F7:8D:23:CF:4E:31:90:40:E9:82:91:80:3C:30"}}},"request":{"raw":"GET /profile/upload/2026/04/21/9_20260421214102A010.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.qprchs.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Apr 2026 13:41:02 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WwBlnbVPCnGN4r%2B%2BT2LQNps8PGD6xaQM64M9ZTyK2Lao1dPQr3PZYARHqi3Q1kdiwotFNx%2FD1eKGQDR4uUjjVlF5RcTfBfnRih9g598hWrD24DjT2Fiw%2BiMvTGojdn1uLHaLDRxpA%3D%3D\"}]}\r\ncf-ray: a11580966a835685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1032,"size_decoded":1897,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"3fcb1976da99a4c7d16cf8b60335c25b","sha1":"b62019c6a138415e9579539faf22f6afe34ce87c","sha256":"556ac120c12f9bd31af83e28183c3b17c57d10e34fb34ca64a45282c4dfc2ced","sha512":"d8372e9a2c2f77e10802f0a984dae30d53a22a90a5b7660588c836ab8f501db19600117b6c0126d879ed83d9cc2dd7a70a5ec0ff894cf2f8f16194bfa09c6ed4","ssdeep":"","tlshash":"6b11b5a3576944babb40f1a4c17ce485196e22bd81dd23522a5d7836cc480431f88bc6","first_seen":"2026-06-18T17:24:19.337906Z","last_seen":"2026-06-25T16:56:23.785153Z","times_seen":3,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":17,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"admin-api.qprchs.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"admin-api.qprchs.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/BNB_20260331212918A031.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.945Z","timestamp":1782406551945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/BNB_20260331212918A031.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:29:18 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 48\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XR%2FZELs%2FKKw1jpcCHcAm7tgXuQ%2BjGhlMHrDFVCZgZ3RPuN04hBDfO0HjTfROVbFQ3CxToYl7uLm9wXHQYsjGmHoJmtoWqWlloWc7O1do3DQoYKtrsnEapRzqXhysWWvThJRubCAqaL0%3D\"}]}\r\ncf-ray: a1158095c9eac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2560,"size_decoded":3424,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-06-28T12:56:58.862751Z","times_seen":1531,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/COTI_20260331213536A042.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.979Z","timestamp":1782406551979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/COTI_20260331213536A042.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:35:36 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANOyy9wcc14AZolSn5UTPy8Yb5qAxg8s8LbXn%2F2%2BQoZLP%2BMkxVEidfuzpdS6Qjh239nVrp1Ic0taqWCt3LmmEGVLAdDfcBma4Ec0%2BSKRvTN5RdUew8ZfhZwul%2Fo2EnGmiEy2LDGFuBQ%3D\"}]}\r\ncf-ray: a1158095d9ffc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1621,"size_decoded":2489,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"f72b5ea762d0abaf8bea1bb97a220909","sha1":"bd6ee7b972b6dbbc76201af8f7f6c04e859b90a4","sha256":"2970ca3cb7eb0f846a7184e979d4e8456e007439a07415d19fd17878bf2760e7","sha512":"f4f6706a7a9134e367045c2a563bb53990b26863ca5dc319ba4d72134ea289a9b82fbe9212a0f05651336f519b361627954d7d6bb3f713282b69aa70e4800545","ssdeep":"","tlshash":"31310a521f244084eaec21e53b7c35a42d5dbe233c4ca79acb55c8731a8835ac409d82","first_seen":"2025-09-28T17:49:51.688415Z","last_seen":"2026-06-25T16:56:23.786811Z","times_seen":16,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.qprchs.vip/profile/upload/2026/04/21/5_20260421214000A006.png?2.2.1775007331435","fqdn":"admin-api.qprchs.vip","domain":"qprchs.vip","tld":"vip"},"ip":{"addr":"104.21.93.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.021Z","timestamp":1782406552021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qprchs.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 05:21:48 GMT","end":"Wed, 23 Sep 2026 06:19:14 GMT"},"fingerprint":{"sha1":"9F:28:79:DD:64:CC:7A:AB:9B:66:AE:FC:CA:68:0C:21:39:5F:A0:05","sha256":"B0:E9:6F:5A:6B:C1:5F:B9:B3:8E:78:BB:11:CA:9A:1D:68:6B:F7:8D:23:CF:4E:31:90:40:E9:82:91:80:3C:30"}}},"request":{"raw":"GET /profile/upload/2026/04/21/5_20260421214000A006.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.qprchs.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Apr 2026 13:40:00 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wgFDIWGbxLpGHIAXcpfOno9mJSsbwk6Xjvo3Yl0eIfEpj0UlmLgsuw6TzObDMbiKoaX7M2wkzsV4KpHvXaIUZVMQQw0qFoyx7bDIRZw3pYEVKgL6HHyLBJhhr2HwBC0qzVfZSoucQ%3D%3D\"}]}\r\ncf-ray: a11580966a865685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1472,"size_decoded":2332,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"d81e9cce900f60a46dbe647e5ce15ba9","sha1":"428aa5ce21cb23c14b683d9065d8811d09e386b3","sha256":"2022af97290fae3a1015d7967a20d665bd4138c8cb82beff6f9c4cc9c17bd390","sha512":"89719c5ced02a19e73cc4426003ac8b3622c9fac803ee68b967b733e642c1d985595865e05118d09380b5507437b9f87d5df7b5995cb6debea63c5357c233dab","ssdeep":"","tlshash":"35311b859fd465050d319db9ce5211318ffff6499a3369588fc4a2d2837e442c11c633","first_seen":"2026-06-18T17:24:19.271943Z","last_seen":"2026-06-25T16:56:23.787516Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":19,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"admin-api.qprchs.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"admin-api.qprchs.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/XRP_20260331212954A033.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.947Z","timestamp":1782406551947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/XRP_20260331212954A033.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:29:54 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=txzkNSBku9pQYzqFnE2tUQM3llPLNuPqbHSRLeMXEWes2iS5uggGQAFLpVOzKkqW76czmMVyljd44ZODs47ojtszpFWdX%2Brbs4AvoXBp5yLFNXSorYtcZ5jKZZPMipE%2FaE6%2FttXLQrY%3D\"}]}\r\ncontent-length: 953\r\ncf-ray: a1158095c9ecc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":1791,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-28T12:56:58.888693Z","times_seen":1537,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.039Z","timestamp":1782406552039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmQ3u4cIOJjmRKTLxDCbN6Okz4jwq0VOjUdlu1IpqbL5%2FbcaIv6zk3LjE35yigViEj3l0EU9SOW4VA4PnKYvXws4QFdXgxSyDNLjARgcm03q3RuVMYMFIK7pkQAMsou1hZj0G69f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809b2f25b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38424,"size_decoded":9369,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"446f6b9cf754cfb3d4a935f3470a34e8","sha1":"0786eac4896f0dad0ad4bcca36a1367d018f000a","sha256":"979461078856a1547ffceafd56f90039d471c7ef7e42b0befd3ba84089ea49f1","sha512":"18bbf6c44adff947730791126dd527bcf90966c7fbb32e711aecb26d96b45b7aa214ee01f067f8a9f028be8387e0b9e493b8c3f6cacd1d52d3e84e9c4d853e7f","ssdeep":"192:Vyu9Y+tHd6ipEXQsX+axNh95v/fQm5hb2Gp4hcI6hYxF+ZHPC43kJFHj/4:Vye9Dah7v/fRZ4hcI6hYj+ZHPv3k74","tlshash":"83036d308cc9c278e477ae8e1fe3bed099173ac35bde0cd1369d0c547940a6693997a6","first_seen":"2026-06-25T16:56:23.789049Z","last_seen":"2026-06-25T16:56:23.789049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3957,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3957,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.050Z","timestamp":1782406552050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:57 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2BHTWvwOxtENR9ghBlu%2BtsjZRyPFKxPSuVjxBF%2FgoTJNiDF5tdjzoRYryEuCtBd1iAcCYjuOpfkRQF7E%2BgMUiFiMSC2MnMPINcofIiEGilqMcV6uv0qoO5ZiRJSul1dikYjtmCEH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809b3f2cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35967,"size_decoded":11078,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"87aceb314f9bdd83ddc073d9d579dafe","sha1":"19c36afd6bb7de38ed4ff2258743a799ac2b4f66","sha256":"4b823ff27bb410d18d9533c27129dffe9753387ebd4ebf1d9bb634f2b7bd2dd4","sha512":"2333f75e482d03da49a58bf2a975338fb5b5b17b0519efbe0c4263d1de0f3187114ee27f67fa73537d053c6ddf460a3acf82b39ddcd9080e7c4fafe966a2fa0e","ssdeep":"384:EZp4Z1YfYKBZSggKc7pOxz+CYqKIpe3l1WS:EZp4Z1IYSZxIdOxz+CYqKIpe37WS","tlshash":"c3f2873358948059cc30bce25fb3afe38b2532d64bfd1d8523bd05897a643a6f149b96","first_seen":"2026-06-25T16:56:23.789906Z","last_seen":"2026-06-25T16:56:23.789906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4435,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.291Z","timestamp":1782406552291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDDA3mP0YcdcBBnlTbnpTlEpwCzUhWb55iu3%2BBYyxhQSe1FvXzkLjMrdZntWldRX1h9teYODOr%2FgvZWdv6CGHhcK89XBu%2BPJsQHHxTONwb5iN5AZd2moCIYPrgfUcZ1AKNaLYjcU\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097de68b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":888,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":4234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/common/getAllSetting","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.072Z","timestamp":1782406550072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qvw9%2BuW7Hse6nNqGUmUuX%2BNxiM8frCnttSl0E3gOxP43Hs2lhsUas9pzvuNzkMOboyrL59x6p909TRBIQ7P3h0eFqNz035pG2uwxbzDnjZ%2BujsmVlJAmQ7Lv9I9N3HEwUEJXauq9\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a115808a1aa9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":878,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":1353,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":1336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.695Z","timestamp":1782406551695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hsJ50X%2FDIS%2BdswQpmTdUcUnP9ymsFOy%2FSm5IKh5VqgS5favgepVF3eTb2uY08dfXjY2AIeGkx4BM8wYTfUPW%2Fo%2FOzVhRF%2Fh3MHeTqUntP0F%2BAzbUPd%2BZRGleImyQoVRimbj1cCNG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a11580999ed9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":945,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3ccb2bb39cade3aecf21a99ba10f300b","sha1":"662a607a866c8315d363f22ab6221fd5d68c0162","sha256":"8aac5d1097912006fc33b3af18ee502534182651fc16e81eee157ebf395b7aba","sha512":"ced0055a3ba4d5c9b9eb6e5245a74b6fd20dc54dfccb3a77474f7d8386348425752e10785ff90c9141a90c84d8aca64f03cbd258797b132fcb24504667b14460","ssdeep":"","tlshash":"27a02200ac0880823a03008202a3030000f0308c22000a08ff8ee230e3202be3083808","first_seen":"2026-06-25T16:56:23.790721Z","last_seen":"2026-06-25T16:56:23.790721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3947,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3947,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/SOL_20260331213408A038.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.969Z","timestamp":1782406551969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/SOL_20260331213408A038.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:34:08 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wj1yMWc6brkrSBfa%2Ba7%2Fi3VjzTVJKhNBxiQg%2FvrCh8sf7oL5I4pw%2FbDVPECtbPgUfglt19FSc0zLbYmpOT949%2BggVprJ1gWx%2BFHD26qq0lTLf%2FVGunc%2BI7La23mNoQn36NcC9KdTK4k%3D\"}]}\r\ncontent-length: 404\r\ncf-ray: a1158095c9f4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":1252,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-27T22:50:53.313868Z","times_seen":978,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/cooperative2.svg","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.017Z","timestamp":1782406552017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/cooperative2.svg HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-84f0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 48\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LPxK8JFdK%2FLX%2F8ftBQPGUhudwNlqeUQWkl2C27fZnwAlb8sPSG3MW8oddtj529wtGGUVETZUsmgRAKfPRbxzXJRgGbvI8TtSUoaJ1o3zBkSqIT3FfTYzatE09LHzKo%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580961d0d35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34032,"size_decoded":25020,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc6256de7476e170f90ebf32758d40a1","sha1":"3acf9122d542d0db54b5f41f5ee0294d3f20823e","sha256":"03e40a172533b8d9fc4a1eff261af639cbfe5ba5a38bacf543e5924fed4ae7e9","sha512":"e68aaaeb9754eb430b00c049a3ba8130f72f746ee099af796d7795df90e6c71b6e6472ee63e54c53b5cc19059e4ab9ea45d279f7726b292261235298edfac324","ssdeep":"768:Jfs921W6+Jr1T/s8msmsCdvPtvMW7MOKKiq2d6Y/ML0XwUwCvrD:Jk9217+x1Tk8mDsaJx7MOlx2Mmk0Lrvn","tlshash":"d1e2e078f30a1c4ed7d1a64d6725ef68bf07a52fe3acd603f908a6014187d835a790da","first_seen":"2026-02-24T16:10:35.2349Z","last_seen":"2026-06-25T16:56:23.792077Z","times_seen":65,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.qprchs.vip/profile/upload/2026/04/21/7_20260421214049A008.png?2.2.1775007331435","fqdn":"admin-api.qprchs.vip","domain":"qprchs.vip","tld":"vip"},"ip":{"addr":"104.21.93.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.022Z","timestamp":1782406552022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qprchs.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 05:21:48 GMT","end":"Wed, 23 Sep 2026 06:19:14 GMT"},"fingerprint":{"sha1":"9F:28:79:DD:64:CC:7A:AB:9B:66:AE:FC:CA:68:0C:21:39:5F:A0:05","sha256":"B0:E9:6F:5A:6B:C1:5F:B9:B3:8E:78:BB:11:CA:9A:1D:68:6B:F7:8D:23:CF:4E:31:90:40:E9:82:91:80:3C:30"}}},"request":{"raw":"GET /profile/upload/2026/04/21/7_20260421214049A008.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.qprchs.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Apr 2026 13:40:49 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jI8kACV4Sg568ycaChsf4dquEbpq5TNc80sL%2BHU6enIXyvr%2FxDT%2BNtRQ48Bfbtjv6vLui%2FsffEuoMHOHxnJ3Uqjt%2Fkl13DdZMJjORk845MMokSgk6pv7Lxh8JP6vuy5oYTZj3uQRA%3D%3D\"}]}\r\ncontent-length: 751\r\ncf-ray: a11580966a825685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":751,"size_decoded":1595,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"34a4e5daa1f3ac05c860cf58e86fa2b5","sha1":"0b2fdccf94daae61900854b88b88533734f0c1e5","sha256":"ad8f44e575f6f2d6e93e328922c7cbddcd5c6dca8aafd46f3498d4db40a31de0","sha512":"1d5ae5ab0e794c687adf16748d457c0dee4e403befb3556c40e65b70264819a048488b6a4a093041ea7dd065fd6bce4af39c7b4286917e1bb644254724d6c336","ssdeep":"","tlshash":"c301bac164f42cf7b344350e73d47304982108803985f25ec0b12e37a07b7c59605ebb","first_seen":"2026-05-11T12:44:44.533124Z","last_seen":"2026-06-25T16:56:23.792556Z","times_seen":7,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":19,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"admin-api.qprchs.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"admin-api.qprchs.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.033Z","timestamp":1782406552033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:57 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wEw5gX2VMnkdfvapIu4uY%2BlngJt65ei079bzX095DR5IPx4RtG9y0avAaAproebm1OGvEpi9oQEc3Mj%2Bu7si0I3vdMrGxdB770j3qJooGptip1bNufpyHmE6x5KlXRhLMIev1sA6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809aef1bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37871,"size_decoded":12325,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f1f635a63c9ea74d34b4b259fca52eb2","sha1":"1473afbadd2b5ca1d3d19b6118ecbc777a4c8730","sha256":"6c1597f8557901148c2adc3f52e91a8295772e2ae5485382983ff04e4b19f6ef","sha512":"d6fdfee050b67d67395d0ce82d144789746c63f3e0cc49b904b59a4e8ce9d72fdd5bcfc3dd624a576b811557a531958fffa84fd1e2867e2fd043d4cf79251257","ssdeep":"768:bwxtYvMlIi+W+8QdZNfMftdcGCJQbQywY6vI:bqlIi+9HdZNfMfjCJQqI","tlshash":"c603a6b34edcc26ac934ecd667e3bce5880773d703ce6c4215caa70569a4b62910979e","first_seen":"2026-06-25T16:56:23.793129Z","last_seen":"2026-06-25T16:56:23.793129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4235,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/5ca8998ce9db42db9305ebcfcca0df4e_20260331210251A004.png","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:56.568Z","timestamp":1782406556568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/5ca8998ce9db42db9305ebcfcca0df4e_20260331210251A004.png HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:02:51 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 53\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F5exWaN6wEcHKfB4WkaA5I%2Fxi2GsnKp7TpfqCTH7d72U6XWqIVQO6YPnZaoXUcQzOv20UZbQ%2FOkt%2FlJLiYOJ0nvf%2BLDSyDHMup4GAzdQjToRbszPuUnSrL4nniok769uM%2FLNQa6cFgY%3D\"}]}\r\ncf-ray: a11580b28e05c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":548460,"size_decoded":547965,"mime_type":"image/png","magic":"PNG image data, 1200 x 494, 8-bit/color RGBA, non-interlaced","md5":"d387ebeca489227155835bf44c221cd0","sha1":"d67185a3b8f72e950e0a0c225f2afd5816014185","sha256":"1e066e832b57393740a83d024d8d99a87573eb3e0e4d7dea9d026ce30747d0c4","sha512":"e2322a68f9e9a69fb6ba5cb36b825afe173275c39f9a99d5bedb3fcf5ad0bc4e4a2d4c561a2c47f2533ba34f021097dad962e98fc4f3c6b3b5f60bdff34b6c91","ssdeep":"12288:hc2T1bkJbVrdpl1w09PRFKavw1IWj+AnU:hc2TObRpjw074PbqAnU","tlshash":"47c423683ae9c1c32daa9c9f503b58e5ea1097f8ec7117e6b1c7b0d170b5e880125df6","first_seen":"2025-11-01T17:44:45.749561Z","last_seen":"2026-06-25T16:56:23.794627Z","times_seen":31,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/kline-ey-WXSIa.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.082Z","timestamp":1782406550082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/kline-ey-WXSIa.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLVzZTwBxfKkA5Jrf%2FFHNU%2BLcO%2BtPgGpBJhsxVNRPtRx2WRC8b%2F1XT3dPh%2FK%2BrqMODzQW640OKIs9RzOwV4sXLOLTLQLX069BtsFq98tlBRVwfzGwX%2Bl74F7GpLKdh0%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 26 Jun 2026 04:54:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1,i=?0\r\nage: 50\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69cc7662-50\"\r\ncf-ray: a115808a0be435a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":870,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"42afe409bd8cd43d619b85fc026040ec","sha1":"26145c5eba920769e42b4584d48d7d3974a1ba60","sha256":"8c16fa986fda8ffc42d48f01156858ec353c35717f770d926e35583477177d16","sha512":"2349b075235dd2a8c36d0d686400f2f052e3ef620eb49f41cd64388231b05806abaa9ac1c9bb1ca62f72faa68e5dccb04c18f0e3782742469d0abba4ac12d7fd","ssdeep":"","tlshash":"d5a0220b0ac002f202380cc0a3a88f0a08b00cf823838bf0b00803080a200c3c00ef00","first_seen":"2026-04-06T13:09:14.696071Z","last_seen":"2026-06-25T16:56:23.795276Z","times_seen":11,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.qprchs.vip/profile/upload/2026/04/21/2_20260421213932A003.png?2.2.1775007331435","fqdn":"admin-api.qprchs.vip","domain":"qprchs.vip","tld":"vip"},"ip":{"addr":"104.21.93.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.018Z","timestamp":1782406552018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qprchs.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 05:21:48 GMT","end":"Wed, 23 Sep 2026 06:19:14 GMT"},"fingerprint":{"sha1":"9F:28:79:DD:64:CC:7A:AB:9B:66:AE:FC:CA:68:0C:21:39:5F:A0:05","sha256":"B0:E9:6F:5A:6B:C1:5F:B9:B3:8E:78:BB:11:CA:9A:1D:68:6B:F7:8D:23:CF:4E:31:90:40:E9:82:91:80:3C:30"}}},"request":{"raw":"GET /profile/upload/2026/04/21/2_20260421213932A003.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.qprchs.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Apr 2026 13:39:32 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 47\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GkiQBWLfrE5IPOfQurQXuQaQ5zziAxXDPbQE5Fxp9FiN0imocUJXPV4prHj0ddJxWdKMMdU5JkY4WtlP9hrHa7ea7H9MOlW7dyiHNTLbzQCFEvy0uA1d4mIsIRPOVWdgGiajEDmi3Q%3D%3D\"}]}\r\ncf-ray: a11580966a845685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2494,"size_decoded":3354,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"dedeeef111ea3172f567301fb80b7a28","sha1":"ba9daa2757693d82dd63704f4d1bef60c1012df5","sha256":"5a16511e23de18d2ce5b538da93c2d2999286e544d311b1d09fd64449737980f","sha512":"e97f2f3ba1e5d8dd52b7329816160ac53945777bc95e27249646cf1419a807a28ef10f81741dbf4f974f624d7e23eba1a7ca2974d17d5aabf4b014a40596e174","ssdeep":"","tlshash":"2c511addc05acf6fd90d2e83a9c50a81523f258fb436374630309528528aa0c37237d9","first_seen":"2026-06-18T17:24:19.200475Z","last_seen":"2026-06-25T16:56:23.795879Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":23,"connect":18,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"admin-api.qprchs.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"admin-api.qprchs.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.818Z","timestamp":1782406549818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 1197\r\nexpires: Tue, 15 Jun 2027 16:55:49 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RM4%2B%2FMuJNsvGie%2Fx%2FRrcdVWJgo%2FpaDV8aHgJd4Ky06OLLoigAEgCVTzWqKFN42w8YxliHXSwudg2A7EsXjqNedCWOnYiQ4E2qLZLfXqP1QqPt5O1JtwkcqSXKkQq5pLY0NCrydx3\"}]}\r\ncf-ray: a11580888d3f568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":19812,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-29T04:06:12.628049Z","times_seen":30911,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":7,"connect":3,"send":0,"wait":18,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/common/type/defi_activity_type","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.242Z","timestamp":1782406552242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRTemCh6ocSHv%2BX08hM5WfZeWVsFI1R0qSvYXzY8Y4sUodk5vii600i8b9AqsIcmkoN55kgfwj9vD5%2FqbWVjRL9NkreJU%2Fr0mWjKYhqdj3KbCQmz%2BJ7HvQIhqK4xxibCS8ZahYaT\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a11580978e48b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":890,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.290Z","timestamp":1782406552290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJPLiW49wEvJ6hsw1zuVoY1fEo0i8rRCSJtv3VEnijBzllJIfcLoEtpbcPOUUkkpZEqVzzVv3HYwFqFgydopFvNHsZ2QS2tlVmd75acj4htrVB9ZnT4iJrzBjw1U9WxED0RoXPEo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1158097de65b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":882,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":4234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-charts-CBxdiIYW.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.084Z","timestamp":1782406550084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/vendor-charts-CBxdiIYW.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-70a2f\"\r\nexpires: Fri, 26 Jun 2026 04:54:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 50\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mEav4jf7whZC6nsrQ%2Ftj8nUNXr8mERcFhXOq73H%2F5GuFKuaFw1zGHIBH%2F5zmWnFSpdoQQR6PJjYqWIz0%2Bwpd1URsNG43reoWfGnUIy5UNgLgQuYFOAmV8EUd0gowjl8%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a115808a0be535a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461359,"size_decoded":173675,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"bb6fd5af8ed82fcb074422b471393f56","sha1":"5328c84f1554b51cc13916d556f412e6e71eccad","sha256":"10b1c65413e2c0284465f521857abf82dc59e10d3a66c4dbdbfbc6acbd9cbfae","sha512":"6f59bf4c626ffdaced0da12567bfaba66e08ea26978d13a6c90b5fda17d70f0606c578d6c44dffc71cea14ac2ac9eb73b8ff8cfea70cd3f482b4a42d0871e107","ssdeep":"6144:1Njp1ERor47j4ueZiuK5GvOWqLLrc8r7iWanrg+I:1Njp1yk4dec3sGWcFiWarXI","tlshash":"ada4199cf654b03583936170057f050fa33a290da44a86bcf669e4ee6cbd44e627bf38","first_seen":"2026-04-06T13:09:14.714425Z","last_seen":"2026-06-25T16:56:23.79713Z","times_seen":11,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/contract.svg","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.922Z","timestamp":1782406551922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/contract.svg HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-594\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 48\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxPb2V2AwItJ6scJMsvd4b4FhPlTLxEGUGsw%2BXnf9AnOli3uH27LoWiq7maL6CrOtsdc9L3UgYEFld6ygIqGk3z4Jv3xqDnymlWWJSPkuoYn1C%2Br5wF0dYbemGtlgaI%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580958ce235a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1428,"size_decoded":1540,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"efaacf17d8d90547953a7a9dd61ec2b4","sha1":"e3717b22a97be0eb581782ec087beb5b56ad036c","sha256":"8dc73b270dc5ae9a60c94191834deb88dbe59950f72be72bdda75ea3618facd0","sha512":"5cc2004dd6c6d614dc980531e6591e8f408dfcb0eb6e632da58375088015f761f630743b581225655dccd32464b2311b5513d2a70d43c4b5bd3ee18033d929fc","ssdeep":"","tlshash":"dc2141ebe7d8b5d0e905e780c91592a1b5b931f93b7e4b54ca90af08331c06cc88ec54","first_seen":"2025-09-28T11:01:39.541404Z","last_seen":"2026-06-25T16:56:23.797765Z","times_seen":81,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.qprchs.vip/profile/upload/2026/04/21/3_20260421213940A004.png?2.2.1775007331435","fqdn":"admin-api.qprchs.vip","domain":"qprchs.vip","tld":"vip"},"ip":{"addr":"104.21.93.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.020Z","timestamp":1782406552020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qprchs.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 05:21:48 GMT","end":"Wed, 23 Sep 2026 06:19:14 GMT"},"fingerprint":{"sha1":"9F:28:79:DD:64:CC:7A:AB:9B:66:AE:FC:CA:68:0C:21:39:5F:A0:05","sha256":"B0:E9:6F:5A:6B:C1:5F:B9:B3:8E:78:BB:11:CA:9A:1D:68:6B:F7:8D:23:CF:4E:31:90:40:E9:82:91:80:3C:30"}}},"request":{"raw":"GET /profile/upload/2026/04/21/3_20260421213940A004.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.qprchs.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 21 Apr 2026 13:39:40 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYPB80EqvOt9fUZXEgF1QOgEI4niBvgE4Ws4%2Bs3aJj6rx9EmFygSuxrfYEG%2BKXWeKm2a9Y9GxZz9SyuygCcYg1atR0vGTAPR0Do%2BUlld9R777gQHZNaD5kLoURQP70ZiVxjy3TfaNA%3D%3D\"}]}\r\ncontent-length: 1008\r\ncf-ray: a11580966a855685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1008,"size_decoded":1849,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"96d259e2155c9be3dbe0e62e26c4a199","sha1":"f617359d51325559e2f4478751b90d6a12223962","sha256":"044b67257da8671b6cae37fd82d2bc624feee91bfae9518ee7b979c889362ecb","sha512":"8ab4f05660b4c2d5db81b08d6b11774c39707a13434bf85fd0807fc215fe69537e384699749a8f68677ae511e12749322b0a2d0b3b8aa59af52c6391472ccb67","ssdeep":"","tlshash":"0e11d8d6a2c03c26d3081617e3458d86e09b4010cca2289d3be1f465b349cc7cfcad83","first_seen":"2026-05-11T12:44:44.487588Z","last_seen":"2026-06-25T16:56:23.798371Z","times_seen":7,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":20,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"admin-api.qprchs.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-25","alert":"Sinkholed","trigger":"admin-api.qprchs.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.068Z","timestamp":1782406552068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g0m3Cke4y%2BaxVuhngOZphq2YJNUeKXB%2BkiBaGDVU1Tm4P%2BvYLY8PWfZIGZhkGwm6YCrAAa7lcgM47d%2Be7Kl5%2FRSkXEXKiNj6dwB2489cnXVCyDVka%2BrWrpeVGmVmdXOEsdu8tvJA\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a11580966de2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":894,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/common/getCoinList","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.074Z","timestamp":1782406550074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vpssaSgJWlLPaEamMlaodppyYqS0Keg0JZjWQFTaMUrC%2Fzd%2BhRcUyrPHDNsMbItmdVfvEquZPESEQ8QFwXd%2BDYVcqjVu4hqSvI2ZItYmGH5%2FBcPskQtY7yHLbTwwkx%2BDFe%2FP0yq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a11580918ce1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19351,"size_decoded":3765,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a7580daf48c84680278d9c0040d8bd0","sha1":"9fe4e464164699ee7aeb795cbb8f5b407a532e79","sha256":"801bd60035222ceb4d77abb77045567615ef83f4853be649b9571701b9c1baed","sha512":"ef738cb09a8651fd258e5c5e73dc2d9713f08be28fead4d84901bf5963d01e671d795fcb0d473701f5f8a163c3c47d2f5b9965a175fdde968239dd870a79d509","ssdeep":"384:OOieznfTZEujoZQd2eU1s3kg6W7ufYpYdQIsNVKa8nEB6:OOieTfTZEujoZQd2n1s3kg6W6gpY2IKm","tlshash":"ad923215216c85bec16de1d22aff3922949c356fecc6c91ed2cf8d8dced5970660ae02","first_seen":"2026-06-25T16:56:23.799023Z","last_seen":"2026-06-25T16:56:23.799023Z","times_seen":1,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/platform/axendra/favicon.ico?2.2.1775007331435","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.423Z","timestamp":1782406550423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /platform/axendra/favicon.ico?2.2.1775007331435 HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0wsRxQ8OjZNxFnUzHRE6B8j1zpwnQ1g0QsMTegiULc%2BFlCkzRdH8W6C7NbeS%2F0EM4b7tzMq90PRw2FYT5os5K9WGeT6MqpVMiRBKyc5o21eUa5HNth9Zvg9MHLReXFo%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i=?0\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69cc763a-506a5\"\r\ncf-ray: a115808c2c1a35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":329381,"size_decoded":330126,"mime_type":"image/x-icon","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"acc9bf2f9e58e46707e41999142af60c","sha1":"3babcd15e9b45e07665a58ad7c2677d0610badc2","sha256":"dd9f3b9975c3bc7bc75dbb5156a3f26cb7a3492de70c8aedc3aa537b6d5c0283","sha512":"f8b78232c648160a847257abe46e4b6d3603a46d58805093d0caf7a9fb33734a95dc5da6161102f419d589c4898837d61dddeb85d433f94bd82085f08f53c4f6","ssdeep":"6144:RdrSTHQjalXNX5UjE5TowU6buk18mvAW9KWclYvXfAYPoEJb58E7i:TrSTHQjaBN5FfUA184l9lclaXfBr8r","tlshash":"836423f6b2fd8f21fbaf1302f3b10e7162755b706be118a6721aca51c4196321be1d08","first_seen":"2026-02-25T17:49:59.548689Z","last_seen":"2026-06-25T16:56:23.771522Z","times_seen":38,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/svg/dark/dui.svg?2.2.1775007331435","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.929Z","timestamp":1782406551929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/svg/dark/dui.svg?2.2.1775007331435 HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-940\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 49\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXgjybls7MlsXX8PfJrdZjjTmqPs%2F2smCGogCoxlFw0lajttVHlFe8iahRxZIPQWFbr6VsYbtXcoOxvaoPMAZ5HVX4MeJADHIdOKSXbpx15XNwihMYtr4R8zU%2BRvKxM%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580959cec35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2368,"size_decoded":1819,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fedf984d20136bd338292c02f3678abc","sha1":"28408456ad6526e0e430a6eac75418fdb287cc04","sha256":"23cf0fb591ed527fa662ad48922a235379400ebacc2668334b5f41a148fd997e","sha512":"4d30fdecfec2b773ccfa10cfaaa9fc1a28f547603570757dfa77b0cceeacbd335382a73cd5f7f9a06ff3e3a52d5e895b1f339d6f2108b3719e1526aab6d8f15d","ssdeep":"","tlshash":"834130ea13bc45b8e406839453ba796ae26531eb2480d438f6cc1b24cf230b709c64af","first_seen":"2026-02-24T16:10:35.275496Z","last_seen":"2026-06-25T16:56:23.799896Z","times_seen":65,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/ai.webp","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.004Z","timestamp":1782406552004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/ai.webp HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/webp\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nCa04rMTQbDH0KH%2FlFvHQQBwZ48zq5ixB8W4mvAxeO62tzebaDn4Mc12pDTqnTW%2FKt23anGSUaIUxA4tzxENmnaFnr0Crzn4kHy33tskg1WgFa3RC8M6tbSbIyywEvg%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\netag: \"69cc763a-2338\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 9016\r\ncf-ray: a11580960d0335a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9016,"size_decoded":9752,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ee434d763c325a57dc68dd5cd9342f9","sha1":"db594747347f4901f82ff0d9cb3ce71e95613f78","sha256":"40bd9102ca0e9c26e17694aa71ca21d20bf1f920a73ad03299e21f39eb59383c","sha512":"8a07454d75b9d85f457896ac8bbe209bb45fab6a45b8af5ca1731f443be0938a23f231c9491f76270d08a92e10e8ff453b5de08bbd3196d5c3c8645e5bee169b","ssdeep":"192:FwTdlXOaHnulmseQ++iVAr/wOr9fwO7+v3DeULFnXX0EXlTqKoh5b3:FwTXeaH4++i+X2n3qUJ0+lNoh5","tlshash":"20129e112be96767c912763dd1d05b9bde76fe0ccda8abaa4100895f09172d03d8c1df","first_seen":"2024-10-31T21:21:10.228315Z","last_seen":"2026-06-25T16:56:23.800499Z","times_seen":185,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.027Z","timestamp":1782406552027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:57 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGbUITednrN%2Fo%2FS7kDp4ucb41SALtZ3RIwD0IynTkOgee5Bz%2BEWXFGkkP96fZIM4tojbzKZeQGZIfVO5Y%2F5GIukTlMesGmwrnj8v%2BHtvLPSuo%2B3Oe3B51tEeJVmYgQkBk71MsxI7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809aef1db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42083,"size_decoded":14562,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e27de91d4ce20c1bbb5ea623c30fa84a","sha1":"0a16f27728e14ca9e7482a0a353b413497bc6fb5","sha256":"79895448cb14ecfbc127f67e6dc72c1820c9cc27fc9e4c987ddf444ab1465932","sha512":"12e4e3ebca1245d2b6918792c3738c9719185eedeb53bc63bab1b4abf7b701345a0f484930e3b89da7423aa787a382fe7623009738366af22a5b7a3c18f8ddb8","ssdeep":"768:c0oJnNEeXMJbBd/qTxIC+ydL/wvSDlj4ZFqqbZ3KFE1eDX+1XJx:cnhNEvx/cxNd+2j4ZFqqbZ3SE1eXaJx","tlshash":"a31324707ac99048d83dfec65be3fce0c91277c747ce9d84058a14862994e6bd24eb96","first_seen":"2026-06-25T16:56:23.801112Z","last_seen":"2026-06-25T16:56:23.801112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4477,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/LTC_20260331213013A034.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.952Z","timestamp":1782406551952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/LTC_20260331213013A034.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:30:13 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d9P5A46Nol6bdCmPfeaOhNS71DQRxpXHj60FqCGMfU7QFp8OeETb4snoUBgW7djx9G3FqU%2BHBpNoj3M%2FYQROjnXtD7sWDxtIqyqfun2EthX0wEMOmCDOGoaEKWaa9JR%2FW9yqY8fDLmM%3D\"}]}\r\ncontent-length: 957\r\ncf-ray: a1158095c9ebc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":957,"size_decoded":1795,"mime_type":"image/png","magic":"PNG image data, 97 x 96, 8-bit colormap, non-interlaced","md5":"db1f13e46508474023e51dac9b924272","sha1":"976aea7b350c3d301a1bcc9350fa9b54bff9c8af","sha256":"50b7635088e72a9f004283284a8d63488fa127afa53e157393ca38bb55db1ff2","sha512":"08f80512e3edb58c31435f259a6d27f0ce55186594e94b3d5883245788edf4b503cae6f5361876896658070c159de7d4ea5457b0bdda11df6673f02e7c598181","ssdeep":"","tlshash":"c511b7abf5cceccad1b1414f118a4490e550cdb0147da74eea127e1bb839ab02d04f1a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-25T16:56:23.802182Z","times_seen":524,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-25T16:55:48.983Z","timestamp":1782406548983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NlQNQ2nfkDkYp%2BqdCNyj2JQCFhOsw3anpwgUBguJhyFpmZngppwJbW%2B0Rm6J5PnoRzOROA%2BuIsqwh0DHfUJVGywet7qS5ZonGiMBYRe9gAscsT8Xhcs9EQpFQtHLTYI%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a11580834ad135a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9378,"size_decoded":3754,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1176)","md5":"c699707cdb3f90f81c257beb800b4301","sha1":"56ab9a4e317179f4142e1f773c51e5b910385456","sha256":"07400ee0f6c506bcf2cfa8bf398632209b14161e85611253189db7d7ebdaaa41","sha512":"ff54830f2236642677b06a090d1ec96e7a6e9ac4fcbe4a960a7f51127efa80853941deb557be89878eefa96fc119dd0920e60e9e133d95a99817e93edc92c4e9","ssdeep":"192:TFTKUjcHUqRGMRrdiWK1FiUm9Al6ZIdX3/ZCxfd2nftZbKuB1XiAi7fo:FLctU0pmBZCxF27Sv7A","tlshash":"0512c96769b0a81a23634225abdbf0086e709243860dcce4b5dd14ee8fc1fd5c8e7775","first_seen":"2026-04-06T13:09:14.726596Z","last_seen":"2026-06-25T16:56:23.802653Z","times_seen":11,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-vue-DiGUWyc0.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.839Z","timestamp":1782406549839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/vendor-vue-DiGUWyc0.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-1a538\"\r\nexpires: Fri, 26 Jun 2026 04:54:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 53\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cU1i3daHAN7FkmgPNqotTcoDY1NhX8n9WL5xioTyO0zovyRt%2B5GQ9PRT8yML2Tg20%2FWyZnEbq1hUn2nWzQiWsThHqG9ZmF0cSDKblxu8w3yeZs7CKK5QkQ%2Bv6szdgYM%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a11580888ba235a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107832,"size_decoded":46061,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8c71e858f3554210171fed78e0743972","sha1":"d6b02a6866034afb3db2064c6df1910f8044eaf3","sha256":"705476a5288366dbe11a2076c967413b2367ec5862ae3be5ab603807b807308b","sha512":"5f71c3a27001c44fb421b21691a5d8a1d850e956fd6cd8f94dc5263534b23f9807329168977af1eea01faa551d00c8c8a992280ea206da79e50733fd4db980c9","ssdeep":"1536:HtpPgE/Y2Do8WsbQj5+T/Kjnk+GuxXSEL/7optOulLwpGHRk:H/oErDoxj5+rKjnk+GEXZ/7GwpGxk","tlshash":"d4b309e93282b06263ea19e7007b0016f339194a380e95d4f16dbddb3d7785991bbe2d","first_seen":"2026-04-06T13:09:14.744309Z","last_seen":"2026-06-25T16:56:23.803256Z","times_seen":11,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/common/getCoinList","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.081Z","timestamp":1782406550081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qHLTr25aDob4D1nMJ1cFJcpLw0NL8hQ3jEUlZ4s1c8kiej%2Fyr8xN4BrdKyonXwx%2FS2o5ZFga2M6QXbyG3MOLcA0fazNBRBy3iChjQFYtztxVbODHJwKgNs5097gOyPUwZR%2BaA%2FOM\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a115808a1aa8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":880,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":1194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/LINK_20260331213516A041.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.977Z","timestamp":1782406551977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/LINK_20260331213516A041.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:35:16 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WMYwQwRL1ggMf7Y5uzdqpS4Bs2WZtd4sYPyH2ix9suMoqJezS%2Bv%2B2BtnuKP8mekN87uVkogBykX19lcLvgpgmbpZArQV8yPz3V9TkF6Rgo9viqg%2BgTXubhDG7RG9LDrL2XloHU2L%2BoY%3D\"}]}\r\ncontent-length: 1008\r\ncf-ray: a1158095d9fec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1008,"size_decoded":1849,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"1d8873b15ce7e65a262d1788f19912ef","sha1":"ef5b427eafdcd42ba4e2a785a49bbfb13fb0c1e0","sha256":"93d103ab945f2972cbdd53050d239c6b9df3d430e9343a21143e805b280e3967","sha512":"1d09a7cf6e12da2a6a2d7a16cba54408f3a90dd58acef01b268b37c3f0545b0541aca6725b894862af1de877dd6c7d2ab9cec94baa7584536e9011e6c5553dcb","ssdeep":"","tlshash":"5a11c461b9beb91ac362083381c121b0ca066c3b4120f2e7cc08b210a23c00ad7c782e","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-06-26T17:20:46.783319Z","times_seen":365,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/ac-chat.js?2.2.1775007331435","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.864Z","timestamp":1782406549864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /ac-chat.js?2.2.1775007331435 HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-907\"\r\nexpires: Fri, 26 Jun 2026 04:54:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 53\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vcPfdc0%2BIgwP6AUh%2BM0rJLj8wlscfZ05ANtJ5uotuzWlYCO4eBgpoC%2FbXOLIHRsFsCkGS7c9tuyMo9mJhz4%2BqJ7BJ9K%2FawbvtatAqGPPxRWukSRhC0ZdopySIgjbgXc%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1158088aba935a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2311,"size_decoded":1708,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-06-25T16:56:23.804373Z","times_seen":136,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.694Z","timestamp":1782406551694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PCuzlVn8DYl%2Becjd7M2nulG4Mf6L8VDfEQRQCE1dgvH1sJS1hxWaMcltWPagM%2FbB41fhnkWkzWg9xI4Jbwei9MH0V66NXV0JlEi59DW9p3X%2B4WvPXCEA9iRBOnauF8u8dt9FV6jg\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a11580941d56b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":878,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/BTC_20260331212558A028.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.936Z","timestamp":1782406551936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/BTC_20260331212558A028.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:25:58 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 48\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rGoyTiym5e2yK0l3qR4QGBQhcH24p%2FMq7D6LDborMZKzjoCv03Dr3u16XQjfN62o%2F8y%2BvxokJX4NY3HbifqDiWM3b1ns6wQKXMJmaHk1zawrTeUyqixMAIvgXg9oHHW1EcW8Ss%2FgRTk%3D\"}]}\r\ncf-ray: a1158095c9eec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":1991,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-06-28T12:56:58.895303Z","times_seen":1719,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":23,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/notice/getAllNoticeList","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.993Z","timestamp":1782406551993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHEvyPu8ND9G8ktSnKTRJJl4DjFCYczCztU3RIDUSmMF%2B19A8M17xKBH8I83ll2c%2FC9J6WijHC5ZQbvNuZHJPAeIgGez2pZYTZjKyrISDcieDjgWLcw%2FpkvL3SXsB5L%2FNtzr3d59\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809abf10b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":1499,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"44adf40a487487f0cb28edbbc8c7185d","sha1":"874fb46f6d3698d6f7b18d3891f096d8f4a29ef0","sha256":"4054ad179d35d5fd1ec4cda2ee3834f4d037e371aa96e4950a3da301254b1a95","sha512":"084d919aa8296691a64684d1141d4c9c75bcd45fba804c3c564b7309f1e0e513fe85e026dddf42bbe99d18af381bddee8c6c834f6b40a23166f4524e08df86b7","ssdeep":"","tlshash":"e2219d0f11b89eb9081a99c361cc7ccd956e1747e6a0cc34976bcf6d82f15ba5f2b608","first_seen":"2026-04-06T13:09:14.773966Z","last_seen":"2026-06-25T16:56:23.805553Z","times_seen":11,"resource_available":false,"data":null}},"time_used":4020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4020,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/common/type/defi_activity_type","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.002Z","timestamp":1782406552002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TmTrxrcJ9ZLIlmAcsHYfQKwqzKCmlKPovJcwdja%2BCRpTqwWh0I4PpIiScRqVCd25Qs2YQaw523VczxnbDWy0Z0kcfgs7ptiCQcPkJYMW0%2F3hY05bxFEc%2BYoWuY74VPO32ZNEnWV8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809abf11b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":1128,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"377547c8f767a60f400a02dae63eb33a","sha1":"90cd91d3318010114e6daa8f9e160beb4b0ac382","sha256":"3236498fcb921e4ac10b93fef88ecfda5469b4e2a3be7512090865a46e87d800","sha512":"a0116018b798349f620642b15c673ebf74df3b2a7eac2c1e0afc994b91ac5333b2301804efeff7f64544fd95553001b4d4b19a17c8b8ce7eef63218a74ea14c8","ssdeep":"","tlshash":"01f02814393dcebf095f65d745ec78183adc152b94e0bc60a8ab4f3c6be4171188a21c","first_seen":"2025-07-27T10:32:01.636668Z","last_seen":"2026-06-25T16:56:23.806593Z","times_seen":175,"resource_available":false,"data":null}},"time_used":3777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.036Z","timestamp":1782406552036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3V3a%2FszoPIy88d3m73Ua2%2F1j2qWZWn%2BLu7lJZqFMQaQZOx5eY0M9HWjMVbgEYlo0xQwuKgtEp7iWAveS0fnsiLnosIIgIJ4YqVlRfa1184fYl%2FkXQpyxX8bhc2vk%2BQhpYo%2F9la2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809b2f27b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36108,"size_decoded":10971,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bdfb14713c573b33d380350223663fb8","sha1":"e3eb2e62f7f90a6520c2134eb8c571b10d0b0963","sha256":"048b5280e3a0d55285e0fe911d3392c524a058001aad1950476fac296178bc7f","sha512":"485206f743da0f67b0cdb091b832adbaf8ada8e346208414cfb77eae9c5d2f33d5f7ef8ff829635abad1908f6d411e9af5125731257a9dc0666ad03a97b74dbc","ssdeep":"768:/3nE+SiJ3YVeIdOdT+fNvg/SrFuWDWOV/E+80cVgYLOITjX4dqVUF3yZQ4ug1Iwx:N6VeRPL7TjX4dqVUF3yJug1Iwp8NImQZ","tlshash":"75f277394eaa9249d937bcbe0ba3bce0c91733d307ce5d40198a5c193a95337b16d792","first_seen":"2026-06-25T16:56:23.807183Z","last_seen":"2026-06-25T16:56:23.807183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3950,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3948,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.279Z","timestamp":1782406552279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3JKoCHCxOcEDvjnGLoec0GqihZlx2w08herdoNGiHcAhaAXKKyxjqoRiaDNsiV1XC5Ik5JhIc4xQdVCsfCnzz9M3p91bnksUa7cjV3VfxK4VKNhBR%2F0dqRUYOEA0ZNBvXyO6kBgH\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097be54b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":884,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/finance2.svg","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.927Z","timestamp":1782406551927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/finance2.svg HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-f73\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 49\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbO8rh2dg8Un5bAFQzKI2FlVV5stcE69j2kh5laR%2FAkVE8u%2FIotBX4T36n%2F2FTKQgh%2BQpIbA8M0OdO5NSIoMxy9cBe0uQiC0OksIDZEP42GIHMLc%2BdXQi8%2F47x2k%2FrI%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580958ce835a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3955,"size_decoded":2685,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15820c69df508a6f4594abb055110518","sha1":"53c2b28dcfca28a52709d483c588599263a526e1","sha256":"e8ff1bfa91a28bea1b4e9ed5045a365ed42df3536c30d346ca29b736eb3fcce2","sha512":"fcf282fc54d829e562658e8643a296e414e53ae0c70b436255ea1e275accbd40416b1eb73a166221a68d63e5322b69764c0c39f23fe7b1167cf87bd1cea54ce0","ssdeep":"","tlshash":"3181b7f6e3d972f4918beba8c411947175ab34ff7b294b4983c0ded4651606d85ccc84","first_seen":"2025-10-12T16:34:39.812214Z","last_seen":"2026-06-25T16:56:23.808353Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.281Z","timestamp":1782406552281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yUSVhNXDioLkWc2IIV1fitsKmPBymlmvkAOm5VM3cKCfph3ieZpP5E1DrqEFjAGzE6eOY%2BlrI56K2v5Sm1HcXmJWTzIo0wd8ofoSBleV5%2F6nwxzS7yqpVrjJFdyxUaDnmNX%2Bunsm\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097ce56b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":888,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.286Z","timestamp":1782406552286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FcwaQFU9VvENwV8vMfJdxFO5Ju%2FJn7FmVaoQ6KQ6CHih9pp1ZuS%2BicRUNN27Zguvgfo1m2I9XwV%2Bc6gp4z8aUhba1OUhSYFV4HL5G24Fn8fD6QlaUw75k0SWWNa%2BF1HTH%2FoMODz4\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097ce5cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":892,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.289Z","timestamp":1782406552289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lP5mB2i3EY%2BOkCIIkdF3ZhP%2BXEpfk1y6SquX6Y00K0EGHX3dWtUT15bpmEHuQfbBS7E8orMHeYZm7DrjIhAzFWGudin7F%2BjkAg3zPTSp%2BGVhQbpmhoGhB01%2BF9EcrOYb6tVt%2FLEl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1158097ce64b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":894,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":4236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-misc-B4Dt3apA.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.832Z","timestamp":1782406549832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/vendor-misc-B4Dt3apA.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-2d635\"\r\nexpires: Fri, 26 Jun 2026 04:54:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 54\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iyatXvrmQIolsT%2BUZ0vee25qZmKjXanZI60hbgINC9C7y5pf258BKlXwPBM2SOJBGJKjQRj1qmpCPIahm90u6edwI%2FPkwRlaDPbp6VcA76vnrYe8oE82wxJpaBEOuGQ%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a11580887b9d35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185909,"size_decoded":74749,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3c404deddc39b1a6abfb5142516f0185","sha1":"78a9228b4a184790b95453b65d0f50951cf64ead","sha256":"038164bd12cfa20a07ba22d6e060339ad884299a0188f22c87615bd2bb4f872d","sha512":"c16054b20637a5e2ba9a6ce9169215671e66e457e5dcf1bd9559de4dd0f455940bbde0c3e8bc5d7fe50b39df3783c9e08b9283126444e1258315d8d16266ec7a","ssdeep":"3072:O/e1oxkm6NvbB2PBztbXqB8TwWzHLlQHkN+Wvsj8Kt3qO:OQjNDBOBztbXqB8TwWf6ENZsj3BqO","tlshash":"d9041ac93691b02543ab11a6107b1407f37d6d6ca45c44a8f2a9d4fb3ef9c89927bf38","first_seen":"2026-04-06T13:09:14.729668Z","last_seen":"2026-06-25T16:56:23.808933Z","times_seen":11,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/ai4.svg","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.011Z","timestamp":1782406552011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/ai4.svg HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-fde\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 49\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o29qS35oqDsm0Wszx%2FahMNGQrEhhadSGmNyHxlr4H0%2FjrqNfLDAhrcs29htpHMMYzm6JDECacmiwOUZjiUrLA0cvgoiHHAmVTzo%2BzS57ExiNfYkgWk8HGU8UpACc6as%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580961d0935a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4062,"size_decoded":2427,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f36289a67c02534f334b7a7ba82586a","sha1":"ea680334caae72af8027d42c36702e6bb6929f64","sha256":"0b143b746b8b6034e6dcb73cc78fe60cf59e42a9cba1a6cf605045a9c2e5bbde","sha512":"82bb649678fcb6313c60455f6cd283a1ae047d0f8ba4a0508cff06081b2c231702ddc603c823ebd3ce17eb4cd12b8df28d346c8a04faccddf905b79979f61aa3","ssdeep":"","tlshash":"8d81b62ab3b9e976f104e7b8d6059830355a48bbb5814250c3f5af2f91241cd1b3f8eb","first_seen":"2024-12-07T19:52:26.441151Z","last_seen":"2026-06-25T16:56:23.809535Z","times_seen":144,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/light/cooperative.svg","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.014Z","timestamp":1782406552014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/light/cooperative.svg HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-13b4d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 49\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1%2BpgJ2bEoHgpYhY55qtEUABY%2FIyA8P8GR%2B54csG3ay3isGyVQj%2FR9bg2Xkdcl9YY5C1G1MWZDHkFx3ALBcN9U%2FbN1opj%2FsKOfAkZyecGUoPa5bZrhVwTuJaLkBfR48%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580961d0c35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80717,"size_decoded":61752,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"290c86d36f158d49c3204227be9accd8","sha1":"447efd04768b92065766196f81da6c4b6876773c","sha256":"d9a2b25941f62153280d62d6605f788cbbf8c5630c212f5fc1c04d86af7005f3","sha512":"6a2f9ff25a25902e91b99f3a8c5871f5e82d755c3366062ad5ccdb86e3926208a32c536d73765111f5192c8d35ebae60499a00450fb3b787f2bf52cf6aeb7ff3","ssdeep":"1536:t7Ad+P9FV8MahIfiDJInr3Ya7Z1uMslhso/F:t7P9Fx2d9Ir3YsZIMjcF","tlshash":"cc73027ff819cc0bd6018a4ce88dae066c18be195211ca3f7648794386589ebd63d1bf","first_seen":"2026-02-24T16:10:35.271118Z","last_seen":"2026-06-25T16:56:23.810118Z","times_seen":65,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.046Z","timestamp":1782406552046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:57 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRuBWy0EctRrMcWpLneZGyZGTDfMOCv3aToUK7n8ZeGGimz%2FfO6DDhYr1RbffNU%2Fddu2A53UFSSkk7yV7V4tymNV%2FbOp%2B9OJAhg4GK9%2Bn3UnPOAyfSSsEL6WkduFO5DE7OJWdYD1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809aef1cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35822,"size_decoded":10062,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b75f611e0c999915e478e42683cb5521","sha1":"b9b7aa124a4a5d0ed1c50878da811874fae270cc","sha256":"d4cc790085776248f47dd16294091ccaaa0208d667a9df70feb8da9e989133f2","sha512":"0780f6b6518116d932dd10fd14dbdeb5c90aaaf184c7b6e2c88233bd25c137da7b4206322edc16dd94b01c7e18cf53dbf1831ce47f551ce1cb0d3b7fc4bce94e","ssdeep":"384:rWuLbMFUtixtEijLhOKtWkFtxgaJmqxfsdrCw/1JRv:rWob9tOgvkxJmqxfsd+47","tlshash":"c4f26d364c9a8d19dc326ce32f97bf94a03570c747cf3e62798a0905b99866ee40d397","first_seen":"2026-06-25T16:56:23.810732Z","last_seen":"2026-06-25T16:56:23.810732Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4476,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.041Z","timestamp":1782406552041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tv4BjspO2bGsfvvLI%2BCF0gyhqExp5p%2FABczaMqj3XDFQurCLGsd%2BhacLiWI%2FGCuljsn96YyetCDM91USZQYUwDZRp37bgOAk5ah86Ceor6BJxNvJcfMWLDjUs86ejy5dh7%2FdreDe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809b2f28b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34241,"size_decoded":5359,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"69fa86026442db23665a2159a32b94c9","sha1":"3154b73f6ddbd753436506c1a195404f33d09bcc","sha256":"3f131b8ebd6c7b6a4ec24b02440ef8e486555408b8a214fbdd525e7c41b4c685","sha512":"b78b4e48ab6b5b7641a3385c75e5e18382f0336cbdbac48e19ca8f08ef664b5745e9529dc4f3bd2cae6aa83c72aa71f2a08975e499063f6688d8ee703b5b17fe","ssdeep":"192:gDMza3Idxl2YIjTS7G0Gb/DGoagzIAGDvI35q2aEO6V/IeZwOlSmUM73YRBvD/c6:g54xXs/PvE0ZJoUMh","tlshash":"73f23739c999910cd170ad9b2fa77e80d1037bc74bcd6cc201cedc197b5466aa18e7ab","first_seen":"2026-06-25T16:55:39.113965Z","last_seen":"2026-06-25T16:56:23.811607Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3948,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3947,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.284Z","timestamp":1782406552284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EfpobnXle36NA97Kn3MQfChI%2Bj81FL6Lglx6CTAq5YmnGQAZ0ULKrUxTz0hL5EG3NME9PS7MJlIpm680ycP2hXN3RWprGOIts9XxEUzVoanx%2FKuIyIlE7KHDjr0GdbL5y6Qr9%2BW1\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097ce5ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":888,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/index-CiV884cu.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.830Z","timestamp":1782406549830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/index-CiV884cu.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-1729f\"\r\nexpires: Fri, 26 Jun 2026 04:54:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 54\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6HKvgMnJzRt%2BRmNCN2FQaq%2FWX9TtzbgbKBE26wmo76zJD35GkLUo6PTdz1k%2BfDB7aCRTN%2FY8caAI3VTJls06rfyzBzRZCgQXJmjaJpmCkOEIGWLxWNB9AxTt6yqQ%2F7E%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a11580887b9b35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94879,"size_decoded":33379,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59708)","md5":"578d5b88cc6e218c58b44d47f24f8b21","sha1":"d75ed3d697fe239bea41177eaf398f8b901cf21e","sha256":"f177a0e959c459e642ba76605a0deeee0cbdb975208a996802808a9efb0f5af1","sha512":"2d3a56e1a05a0eeb808f540957efa165ba570d380fcb7c64e8ba9aaebac5058df59f135da488f127a3eee03c8501e0f124969029602bad2d032a85effcaf4e85","ssdeep":"1536:zOTNJ/zhgZI8HGPkWCzrgQlc2iKP2D4HkpEq/Y2v6Bg3ckbAIO:8J6ZSX2YD4E22PdjO","tlshash":"06937d4ad6055bbe5bbd0cd86a07250061b04fc9e84cc827f77e5d5b2ff8c8952ab728","first_seen":"2026-04-06T13:09:14.740282Z","last_seen":"2026-06-25T16:56:23.812188Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/LRC_20260331213454A040.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.975Z","timestamp":1782406551975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/LRC_20260331213454A040.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:34:54 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWBfafQnii%2FIom%2FwqjNXy%2FZjcJUcIEWBOf1UDA%2FHp0wM%2BVdvaGScVOUXLISP62NtrFIxi%2BxqoqzxGkTzvMXbmOyKgHoqNU1lkDfhRPlcDJZzGclaZgvyAAIE6htJprovGSQdylYgj3g%3D\"}]}\r\ncf-ray: a1158095d9fcc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9119,"size_decoded":9989,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"f6be6b8cf09be4b3bc4b497d559e9dd5","sha1":"6d1a3f231eb904cafc0a129385320dfd1290bbb9","sha256":"2cd8988b5c08e1cb9037741860a1648015428421d54eaaca918ec6275c0dbeea","sha512":"6a780ac8c212f16609224f7de298662affe57f56f20cd7b6420d91ae1ad933d95ba67c27580356e28dd18de221eab673ebab40b565c95a74360d0ca9303aa5f5","ssdeep":"192:CS8OuJdRjHeGDI9jHWklAq47TmXK4V4FLBN6iX:dBuJdRDeia2iAkLW6w","tlshash":"4c12aec5ddb8c15643b745be9c378d37dcd6c0369228dd904da878225ea05883fade54","first_seen":"2025-08-02T08:37:54.440601Z","last_seen":"2026-06-25T16:56:23.813102Z","times_seen":29,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.276Z","timestamp":1782406552276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UthAMvjcZ%2Fgh9Z7YUklZbSAV9lHRwbx63srYD8gfLbgL5JnXNsP9kwJmjKhVGJREPSGuST%2B2ND6oANqHUPzEH7BI0YDskDs8tvo2kg1UfmheRptWzZCQuipf6vaAmejucT5Q3yWY\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097be4fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":886,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.293Z","timestamp":1782406552293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csc%2BGkheBU4xUcjjR3JiQVpL%2FqHU7Qi%2BdeoIig%2FK6GjTYjCwpbKPdbqcN8a3IQKex0Qlvi5u%2FPdAwdI7sfU4CjRQSBSFPwG9%2B44wz6%2FkuMY1y4xOU7MM1%2FBTR89pYte%2BEnPMe8wq\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097de69b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":900,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":4232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-utils-C38CGiUh.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.848Z","timestamp":1782406549848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/vendor-utils-C38CGiUh.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-3002e\"\r\nexpires: Fri, 26 Jun 2026 04:54:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 52\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2h6lWLWuqYReZLnIsAif%2BzlGuQceX36GsTFSIg4vttwoWMAG6lEMDXcfonh7%2FqKWHF0GX33xO9m0UTvKGohmHky1L84HXKdcjKjDRn18pTLi%2FHDWpP%2F%2FfM72KvZ%2FEkY%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a11580888ba335a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":196654,"size_decoded":79896,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65344), with no line terminators","md5":"9dfd7df1ec5f734371b2031fe62061d6","sha1":"f49aa8807560927d34627d4be4b446ab21d71f17","sha256":"692de22154ad87cef5dd773927cacdd5308c688078bbb9fae9691762d9242616","sha512":"42c225788ef8276bcef5bf4d81327020312ebfb18d02ef5f156a00773dbdc7f7d2a76654e58ea4351bb495402aa103cc233b33510c416280a029f5f8c77580be","ssdeep":"3072:0ixNutZvGjzlxvA9GQR92doOkxAzlETkfMT0vH:0ix1nlxvA9Tr2d0g0T0vH","tlshash":"da14e8c87292f06653a724b500bf000bf23dad25b44e84a4f265e8da7db955e9277f3c","first_seen":"2026-04-06T13:09:14.68846Z","last_seen":"2026-06-25T16:56:23.81368Z","times_seen":11,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/GraphMin-Dds9x9h7.css","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.086Z","timestamp":1782406550086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/GraphMin-Dds9x9h7.css HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EJxCkNVe%2BQZ2eDv5L2k3FYmfhoCEmrpTK0uteEk5uyHmI4VieBBMf5Lqh1bfVY3x4gQAVc%2BdjplmcTo99cP%2BpLyPNdUCldLf55gkgiis6ioO9IQRX3kBi50iORWuybw%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 26 Jun 2026 04:54:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 50\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69cc7662-41\"\r\ncf-ray: a115808a0be635a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":836,"mime_type":"text/css","magic":"ASCII text","md5":"be029ce24ac6f17a20772f2ddba3ef58","sha1":"ade218ee2760f780f2741be17860b0ae7e3034d7","sha256":"dd5ce214b8fd22e49e63edb1a27949dfe8567d6b1c20078b701a833667a0a03c","sha512":"430698da53bb36fd006e079e3f9f4da048e4947243199882ab0bf399b830006d6dc929b9b325ddd8e95111d8e2f7921ce8b31519b3a3a8263291d1d56f58eda7","ssdeep":"","tlshash":"e4a0222082202030a0300388f88388080b0cf20303800308af802c3ca8cfc0ab03008c","first_seen":"2026-04-06T13:09:14.756474Z","last_seen":"2026-06-25T16:56:23.814194Z","times_seen":11,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/index-DOWcbQWC.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.088Z","timestamp":1782406550088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/index-DOWcbQWC.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQBkNwuIv1fNzU0cWxqHe11P5BUs%2F14VMbHoRT9LvLpQlzlyFNCQTTDRvN8%2BnL9E8lQVYHGX3oAEcLG877xfwcSyIVTz5JTytTRn0JakNXu3VoW3i4yWjhx2YcNDrH0%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 26 Jun 2026 04:54:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1,i=?0\r\nage: 51\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69cc7662-258\"\r\ncf-ray: a115808a1be735a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":600,"size_decoded":1183,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (600), with no line terminators","md5":"d9fe3d5df6492b4204d821679e66a292","sha1":"8b17c554f831d9fc6695efe3c9204c286ee82a41","sha256":"e58295a98111552640a1e8b2617e549d646029c8229e10b3b00c8d6ac54ff546","sha512":"abae5b27b707635e472e16ad324da0b7b85cde800a2a22a68a35f1a4e4b1d91c8c5e1a16601609f9efb72585c0e35b9968edd495c29ac99fa440441528165248","ssdeep":"","tlshash":"eef04749d4c696f74237388c40341d291b0503d4f7a541f5cd7704fd93200d5d12ed49","first_seen":"2026-04-06T13:09:14.768996Z","last_seen":"2026-06-25T16:56:23.814795Z","times_seen":11,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/GTC_20260331213352A037.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.966Z","timestamp":1782406551966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/GTC_20260331213352A037.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:33:52 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3DgSIO2krbEwz%2BnoiC7mmym3A%2BcMG6VKcroJ9Kt%2BYI8Fe%2BoUnQzeshFlG1qo5bH%2BpV%2FBamwWqk4Q7tv5f7FGBBqdsivKHXSrJX%2BaCZFZmJAjUc5er72NXoxKeCgtnsp1ZH%2Bkf90KM4%3D\"}]}\r\ncf-ray: a1158095c9f0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1216,"size_decoded":2090,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"e391b87e780f335a019ab67ac6cd6dc6","sha1":"3e912091bdf15544f569bb7e949c4a77cb0546ad","sha256":"2d39baffe34fb16cc9c761369a2a4d711933924e6348c722f25d5ce928aaa941","sha512":"c6d188df54c3b855998970c5fa26d92624285e5df1ae8a115e0b2e4819de71d14e233855a5669876580ac95cb20478d48af72b76d0a0773cc6742c5b7e43abbb","ssdeep":"","tlshash":"5e210a4290784992c1770074935712d4753f6437226b64c9f0fed027c9e41ed577a4c5","first_seen":"2025-10-18T15:54:25.697383Z","last_seen":"2026-06-25T16:56:23.815303Z","times_seen":12,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-utils-BaVkx4tQ.css","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.857Z","timestamp":1782406549857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/vendor-utils-BaVkx4tQ.css HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-11eef\"\r\nexpires: Fri, 26 Jun 2026 04:54:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 54\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fopYbNKwRqJ%2FHTONCbH487aXRSguX4SJ%2B%2BwEZJx0%2BL2CliyIzopC7BLLBGvfGDeCwk%2BiBkdTY7w6%2FK32JB%2B2UmpMIOq0WjTE%2BVY9%2BS67RJXk27IEN6y5O77oQWdw4sw%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a11580889ba735a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73455,"size_decoded":7541,"mime_type":"text/css","magic":"ASCII text, with very long lines (65353)","md5":"b58107efd258752756eb13c3cb8e1f4d","sha1":"d1bcf46e3101d4ddff77070824c560007d3af2c0","sha256":"2d4c25b06c681d0ba8cef2c4bc42a9ed6a2646af4b35baa63e3cf8f9a4de966a","sha512":"e92eb3901e5bd238d5094fefb8aa42deb51ca9e9c89f22fa41f7c16e06eb6100d52f297629f3a9ce46a67f0c2db89c9f9fac485411ec1df3852f84279a1cbc18","ssdeep":"1536:v6uNQ3fdPwwanleMf72yMzkZUPhw71ZACkFDS3vyf58rBeV05Ta:4kZ8w71ZACkFDS3vyf58rBeV05Ta","tlshash":"e97338ae4891128991274f6287cd4ea84a3dc6b315621cde33552c4b8f87fee33de617","first_seen":"2023-11-12T16:46:43Z","last_seen":"2026-06-28T20:11:30.747106Z","times_seen":240,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/DGB_20260331213643A045.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.985Z","timestamp":1782406551985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/DGB_20260331213643A045.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:36:43 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 48\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IqowhWPQ37EJm3anM61BULVMdRESauSpoA4lQs%2FEd58LO1KkX5SXRvCaYwgqRnDL1lb2nbEvPysnqmhbxz%2BoCRiVClayGYzKXMe1dZ%2BjiZJ%2BVXDwJ1rguC%2BiQp849mSsHuNbb054OM0%3D\"}]}\r\ncf-ray: a1158095ea04c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1183,"size_decoded":2051,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"730a03d37a7b5bb51b44701762b20698","sha1":"6f8e97b45ac383c33d63e6c435e3869d1b70aa33","sha256":"8e8542fa83442dbd5f19cad57d6143f9a3c9e14a6e863d10ac5f54d32a008ba8","sha512":"c2b56f7c9a874fa808d32f85c3d7c60e583bca24d1dc7fe3edb30d595742e8eea3210103aa20652b86d406779b9ab2f65409ca0519eb733dddc2650cfdc7d037","ssdeep":"","tlshash":"a721a7316dd6dd19d0b38720948c8840a187c2b6dcf38be3906851961e4ad88f359952","first_seen":"2025-03-26T18:05:32.105229Z","last_seen":"2026-06-25T16:56:23.816314Z","times_seen":23,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/common/getAllSetting","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.068Z","timestamp":1782406550068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T080MZ5GLEvQEqV%2BCzZJ%2BvK%2BgcGJLukr03sfguj%2B%2BE149ZkJstXpWmGx375sN7C5Xt36j3mU38E%2B313l9p6VTSyOIUj9aqDSG03lVFdD9yi9wZdCn30Ti9Vbb93mpTlH1Bzh6D9%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a11580926d19b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16155,"size_decoded":5428,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b7b1dc202e7aedb86c309dc03e5f7dfa","sha1":"a03f9aa02ae17b42cc16203e2d635f8ed4d375da","sha256":"dd8e7cedb02ce52310cad29030e974c123dd4441b8e125bf413c2b90dd103b2f","sha512":"3b7489b90f58a7deb328ecf21632748b01145d13d8e87aaebc716100d317d46d77df3818f8141bfbbd481e8b9780f6346023dd7f1c08144e4feb68b78e75a061","ssdeep":"384:XR8BrP6ffhyIb32HCoPQVR2eJPMJaiJvHQJzErYyfgcRxS4GVsPdvh1K3Gmw6j3+:XGBrP6ffhyIb32H7PQVR7JKpfQJzErY+","tlshash":"4072864931dcc8bd85cadfd260f73ad069682893d85aac05a1bfffadc9d55205c4710b","first_seen":"2026-06-01T14:36:25.551677Z","last_seen":"2026-06-25T16:56:23.816797Z","times_seen":5,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/TLM_20260331213806A046.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.989Z","timestamp":1782406551989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/TLM_20260331213806A046.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:38:06 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 48\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AijUqqClDbIEFw5R9QlqxCorExlcy1OMt7rXEavXV03gVq5ouG05BdU5Hg%2Bx%2F9GEX23wYkjfUn%2FUJ%2B74m7OM64Tu7X%2BYkUj3howSzchW9aC2FxOLnRVzZYNQPNdu2KRJkJVIcedfwlg%3D\"}]}\r\ncf-ray: a1158095fa06c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1293,"size_decoded":2161,"mime_type":"image/png","magic":"PNG image data, 97 x 96, 8-bit colormap, non-interlaced","md5":"b48b975a3e559da5d543930ce22d9c1a","sha1":"326fe07b634cf7fd6f138b7d4942ee8628b62cc6","sha256":"4630f68885fa1fa2d710e1594b8cb1b0f4e50efc493fe54eb0d1cbe6822cf724","sha512":"3b8ab50c36026de26724b178729db0a82a16780f429ea612107292548cb651f45f792f9c0714cbf4e45709020d8c10a085698224203207f2ecfc2b38cbc071bb","ssdeep":"","tlshash":"a621cbd37adf580dcab504e322421a18d8bed557f83491cf38005443577990826dc554","first_seen":"2025-10-18T15:54:26.224707Z","last_seen":"2026-06-25T16:56:23.817402Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.283Z","timestamp":1782406552283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6rX1YmPGaztF7gVgI8%2BegfFBqavBPhInDcJqkSghQEYNlcFa5Q1adh8IiU4%2FqAo6oxMuXKCfnMYqYZ%2FqC9Av%2Fb%2BbG22gSi3Y3QiHDSn1bzQcy4Ed9rUR%2FMz5vuLI%2F3X1UKC2WuW\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097ce58b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":896,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.286Z","timestamp":1782406552286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYROfzan5exAuMiEG%2F86jKwFISnHvgsdzQQQHc3zxSynQK%2FMv9ITm%2B7t2LnmjnSR63xRigyS%2FkCWm05unU15OlYL%2F%2F7rizmY6whz3CdF%2BarYwBi1qyLpKG8VKD%2BXN3OAcucchfXA\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097ce5bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":898,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-vant-BktFARCt.css","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.855Z","timestamp":1782406549855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/vendor-vant-BktFARCt.css HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-38fdf\"\r\nexpires: Fri, 26 Jun 2026 04:54:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 53\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YIgNCsTILAf3Jankq9JjQaK%2BZ27F9uvJJrqrxW4GnQo6D9t3RNAmkD95%2BwP%2F%2FK0XI5TcwyQr2pszIIP8yfymiy7kBDC5ZCLcWrq%2FISMOxzyFeGG6SRJNCPWSv4IbYsA%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a11580889ba635a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":233439,"size_decoded":87604,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"84001801e3f368bb4dc6baf57fe24b73","sha1":"7a08a65ad354822e93725d8330214a2bf37f2330","sha256":"7c9719555d7389d1cb9b60ef8484b32e7b5d738eb83d1ccc37d6c0e80beed86a","sha512":"785dfb4fbf22bc46d6c51e31c17253468b34339274aab4f89ca06bcd6f7362e3d88a38823c7d3a63b1f8ea21e6b9233e857989de868a12ae43a75c8e90699791","ssdeep":"1536:+CwsBlDOFIxuVoxHtIyNBi3MFYaQj7FCwsBlDOFIxuVoxie47iJVAVDWOIG1Ah5y:+ClDsIxuVSHnNIClDsIxuVSwUDtg","tlshash":"2a34d795e69091bcaf2bf175ab8b56dcf23cf570ed01daa4f10091580ec7bf50623a1a","first_seen":"2026-04-06T13:09:14.70449Z","last_seen":"2026-06-25T16:56:23.817963Z","times_seen":11,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/index-DE_N0ERv.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.076Z","timestamp":1782406550076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/index-DE_N0ERv.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-528d\"\r\nexpires: Fri, 26 Jun 2026 04:54:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 51\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DpqSW%2B7762mQJ%2B3fhcW87v2ES2CwvYazkQR89Z2aOmS%2BCIA7BkrOcpJe5l%2FzHb56wBWNmMB7nf0jmqJ8tozKa%2B%2FjZRjpWBJIsdY%2Bzuzj0n7IlgTyniJ6BVlVjPQL5d4%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a1158089fbe135a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21133,"size_decoded":8429,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (21103), with no line terminators","md5":"e87916e2aa4899ae6793f970f2acfa29","sha1":"6cd7df119e292b2869480dbe60051c4e10412796","sha256":"23d363e094102b130b609a2e0397153a29c3c539bc54bceba8c26e6ef641a4e0","sha512":"5083aa37d5c4e07ecebc855a12974c64ee36316065d54a7b2bbfe9a16eb93e5c9ff0839ac37b893c671be35b821bab992a112a1b5cc7c4460346a4de3397f46c","ssdeep":"384:ojovmFCPPXYGYCiX+dmn1GJBKxBLvfrvealkUT3ClwqJw1z7tIM/mPB+lqCrUNYX:PO4HwCiXKFJUxBbrWauUT3ClwKYz5h/n","tlshash":"c692f815fc13ca7ae5bb80a5605d109076092feed1a4887af2fe4c061bb5db8670e778","first_seen":"2026-04-06T13:09:14.694806Z","last_seen":"2026-06-25T16:56:23.818531Z","times_seen":11,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/useMarketStatus-iyWaoTXr.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.089Z","timestamp":1782406550089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/useMarketStatus-iyWaoTXr.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rY6T3apG%2F6yfn9JpfihTg2dskcgEq5ctcWeBO%2BrqWm8NiLw9krWe089Bf9gJM1rKaY5%2B%2BOiHper%2Fqr1XW9kcfJIfNwkhazBZgyilfLL%2BNKlqbpZa%2BXK8%2BKBZ3IGRSJo%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 26 Jun 2026 04:55:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1,i=?0\r\nage: 49\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69cc7662-2ff\"\r\ncf-ray: a115808a1be835a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":767,"size_decoded":1186,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (767), with no line terminators","md5":"78590b6fb3b787131cef9e86518c547b","sha1":"c6ca716d43ee836bc6375764c8857fec0cb81b9f","sha256":"de794dd91467f6dd47b0d23eb8c1d87d252f8a0c8cd3473cdc4a7f337d953aa3","sha512":"6c92220fe65e8b015e38cc46df336f38d932a21af5538d8fc13fb24a5395b3ade0aff2fca2f91d276f735979e4407529f03d550c6f193bc79256f7f96c0ebe74","ssdeep":"","tlshash":"6b018e27e57870b59c72fcb880315d15815f7b022dedb2b2de5908d157452cf6183e02","first_seen":"2026-04-06T13:09:14.742623Z","last_seen":"2026-06-25T16:56:23.819162Z","times_seen":11,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/more.svg","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.928Z","timestamp":1782406551928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/more.svg HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-59b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 49\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIJLGMi58LzT3crXWL7JaHrKFUmD4AC%2FYtocKZaO1C4i154a3nxxS8sQEfCFHwNBCRQzIYUojLN5xAwh7CJW%2B5HvFD7dnZcxdTFtcZrUQ%2BJtxn1y7Mmhixhk%2F0uX05s%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580958ce935a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1435,"size_decoded":1267,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63810c29f19cf606d16c0cf5fee50f39","sha1":"a78c6ae3bd094c40b29dba1ee1047ae74c6120d6","sha256":"f1d750f4e0385db35c7d1ab9f46537cd61986e2a58c72a49e21cdace58985ab6","sha512":"e07799ea4b257e23d17317e94bbcc7cd5c9b3c2f5893d3fbaa1e267811aa9b5e02ad2b26d224db1ba85af04d6dd5ff71fb9ce8b753bed248253271ab1513e356","ssdeep":"","tlshash":"a2218eae03c87058c116c7afe87e12f4fa6128ff5b504b5ab57c97341f46a4e8499cc2","first_seen":"2025-04-10T04:12:55.936161Z","last_seen":"2026-06-25T16:56:23.819827Z","times_seen":115,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/svg/dark/huazhuan.svg?2.2.1775007331435","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.932Z","timestamp":1782406551932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/svg/dark/huazhuan.svg?2.2.1775007331435 HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-b39\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 48\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpMsXesarqxO0U2AdCtXX1EGDUjQe0Q%2FJ4kS%2FLo%2FTjDoGO1sh8bi8YF3roEOGfcXtKgn%2FLA2ObD8AvHSGyMekfD11W3WqdNyhJpYaFYCdk3wL%2Bey5Hd245fqTIlswgY%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a11580959cef35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2873,"size_decoded":2036,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39d82425ac5150ed01e5b427e55abc3f","sha1":"7627b7ff42018aad3ebdf473e73e1d93a5957558","sha256":"c8e61f65b639b0f4753bfacd166fb29a2191a9554e53c49fa02479af78bc36a1","sha512":"3ad79359f100f517e60bf898fbeec11276e119c4b3668e59a8b883c66a9d3686777f6674e45de7b5cb5dd32a598bdaa5fea5a70c83f158df67cb17e545982346","ssdeep":"","tlshash":"dc5186d4523d939de0089fa4e7b631c6353a30e737d01690f2cf12576b260ce458d9ab","first_seen":"2026-02-24T16:10:35.251591Z","last_seen":"2026-06-25T16:56:23.820444Z","times_seen":65,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/api/notice/getAllNoticeList","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.217Z","timestamp":1782406552217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hIiPKyU2LvsIS05h7aDI1Q%2FFZOCNgTaIDpVEEy2bGHgH3HeYY1eDHXbAhtJgDaJl0jT8i1AYTFOfdpVOn5XA5vpFua5W1msQmuB82zBuEys%2FEBUoYjVkT2SzLnhOc432lhuGeUVD\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a11580975e43b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":886,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.278Z","timestamp":1782406552278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YPSWNqAjMsE3ryzEPTyZ3AVQobTAn92I4dFsYzIOSoX1yLSina1sqep1pB1yTk4vlMppKTTbaxWf8x06JH3nglNDUFtqjhsRmWW%2FeuO530mvD3rtL6EHgjN5%2FBP%2FAqyqhq6SnoCO\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097be53b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":888,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/charting_library/charting_library.min.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.813Z","timestamp":1782406549813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc763a-2a6a\"\r\nexpires: Fri, 26 Jun 2026 04:54:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 53\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6TfyhnIhce1wC0CqaH8hCyKAzTm7Ky9SxjshlCsHxd0Whl22vSYDk7eIX0TPM2ZxL9JBQm2C7LVcWexSSQ5PicHgwTJxoynizD2HYePNen3suhl06X6oCjBRU5db7ZA%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a11580885b9535a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10858,"size_decoded":4234,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-06-25T16:56:23.821053Z","times_seen":1248,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-vant-CT7DbSuD.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.842Z","timestamp":1782406549842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/vendor-vant-CT7DbSuD.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-20879\"\r\nexpires: Fri, 26 Jun 2026 04:54:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 54\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xO9UcOo%2BDtZn2QGcSAIuVd66v69wJUHj7vgcVLMD0oZz39Pwu67hJ8H9d%2Bmzb5hzbDFfORcT1YXPhJVoBD14Oh78IDs76bqYzpMEsuWHoTSMwhJL4s6CCKBHWSAutrE%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a11580888ba135a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":133241,"size_decoded":53456,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65248), with no line terminators","md5":"3fcc33f173c7872525737de5ebee0a16","sha1":"cd5ed8085d23b576a17b55b4eaebd7b6852ae494","sha256":"2718176524f399e60092dffbbc1f08aeed5116eaa8a0fd4d054ebb17a2d838df","sha512":"32ce50ffa647067c61fa4b08062f5183c468fc7a7a34ac77e77e65043bdc5fde510bcdc6e29099694886500796da8fae5b7bb7ea2e5a1b03515c086ce2fe8bd6","ssdeep":"3072:YVE/br8JTwOalj06hRqo3zJf0Izgd2JPisoMoQcaOlroG9KX/:YVE6alQ6XznOaOlKX/","tlshash":"4bd32ad07485f1398bb784e5406b0510b62a1b59b009c5f0f17eadda2b6ecd5b2bbf2c","first_seen":"2026-04-06T13:09:14.701134Z","last_seen":"2026-06-25T16:56:23.821572Z","times_seen":11,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.031Z","timestamp":1782406552031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:57 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CizvpxiLqffO%2Fe2MHFzUoB5L%2BZn7wjJRpDQw7iQLFHWIQtK4DY7jAQ%2B71CpiuZ74trS65wwE7yMvXwMr0il0uHA6NkrNeY9VkdiX4nztNGeMLLXPfBGu4eTXIvLtYl4z1say%2B5oH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809aef19b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40576,"size_decoded":13578,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ad86e74ce52e53299c14e3d9c49e0d26","sha1":"4ce5c4c8dcfd83134e9d955689ace04c4a277175","sha256":"428714d1a77cdc07172f6973c4a76f64efef3c248ed26d354a8ef7f248dc90f7","sha512":"3f93eeb4094d7419a4c490caddf7942417656eb6af1cb1107ab79e8d8db05f6af5655b3ea18c66498940c34d62389bc6239d9972dc4b39cde95f85d2912ca1af","ssdeep":"768:tI/2Wdxzsw3AbZcHTAU8Jq7zJbZ5ys+oH2O/bS:c2Wd6w3AtITAzJq7VbZGPJ","tlshash":"db03e7328a88c19ac9f0add21fa3fc978d2277d343dd7c52658daf05ed5023a9159b83","first_seen":"2026-06-25T16:56:23.822095Z","last_seen":"2026-06-25T16:56:23.822095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4482,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.049Z","timestamp":1782406552049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:57 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5DJ%2BnZs6l4dCpW%2BiD7yJypILWx%2FuhJzoviq4xN%2FqdSL6l8nD1pnJ6XyWMcZZVY4fxhAJyMonHtEHdZ0xZjIvLBYCttTjfChVnISUgZIRhWz3UQtANtN9pEo0JAwiNrg3w41hbEbD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809b2f26b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40091,"size_decoded":10525,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ff9cad4d52579e16952ec472e49cb2ee","sha1":"358dbf92822544f9773677c40b0d896a483363ab","sha256":"0f268d0147a2edfaf7e8219483686285d8ae4234a4191ed5df3f23f675a72030","sha512":"a01b384b47a3d49fa26ec95b68932180fbf65f1653a4c0cae390044c7374f61653f462f781a665d0fb748d67b5c21ed75a4903863b28dc60e5456fb1549097ac","ssdeep":"192:vQUIsxpsQ8amJ7oKciPwqGaqsNgdbOnfc61KI3TSXERHLySUtvh2SmdVrTlUPAyr:R0M36YI3XyvhMESws3y","tlshash":"8d036c744f8a925ad533bdfe2fb7bef441423ac35add5cc6019d6c086a4027093987a7","first_seen":"2026-04-06T13:09:14.711475Z","last_seen":"2026-06-25T16:56:23.823084Z","times_seen":11,"resource_available":false,"data":null}},"time_used":4201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.282Z","timestamp":1782406552282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TfCyHtHIt9Obw07%2B%2BA5hUdOPCr6INaY57umEkTju3nXBVLnf2S0DT2jnmAVESFx9hhQbErSXxwA8BMiBeL6tLJMpYe2ALf36yc%2B81MfYCZsVmtZHdPMMwoeKZLIimH51LSU13YoD\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1158097ce57b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":888,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T04:31:11.099576Z","times_seen":16814267,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/vendor-web3-BVORsuk9.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:49.852Z","timestamp":1782406549852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/vendor-web3-BVORsuk9.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc7662-51669\"\r\nexpires: Fri, 26 Jun 2026 04:54:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 53\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pU68F7IOz7Bg8pMyFn%2BFSu%2BzESD41kO%2FY4BiRh%2BI1wwrXsRGhABXasbTJXYPhvMxeakaylEMpilhftwVkRAgv1lbZYuW0c%2BcrVB%2FI0ajVnGp%2BK6E5nE65Cv7ef6YiNo%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a11580889ba535a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":333417,"size_decoded":100047,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8aacf7fb5d7b81297ce387ffa193593e","sha1":"7943037bff47e96c265e2d15866217d13a8403b5","sha256":"52e209e15aa260663b19c5a873ae7e9188b512a2577f1625b31ab157452286cb","sha512":"a8c58d34c391e029036feb1c05d21ee03f0ff58674c47e0a934892fa6f08c327c6f6686db36976982ee0f279f555e314f3d93d8e87c4a1fa90ddd23e4764126a","ssdeep":"3072:K9TyETcKLh0JM+IUiRw1pkLjRnfGFrZ2YbLLQMHQe2H/:K9TyJKLh0JkgpynfGz2eLLQMHQp","tlshash":"10641984b552f0700ada54d190b71203f338bd59709b80a4f6bd98eb79bde8d9277b38","first_seen":"2026-04-06T13:09:14.698176Z","last_seen":"2026-06-25T16:56:23.823698Z","times_seen":11,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.906Z","timestamp":1782406551906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\nserver: cloudflare\r\npriority: u=5,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 56\r\nexpires: Tue, 15 Jun 2027 16:55:51 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=obJyo4VE1Fc27dxE0TjRHeHNuTQ6KqDtchMSkYS183dD7l63JvSC3FM%2Bi4zwedh%2FqM2g4Mv2WTsqhkW6CRYI0b7NZoX3w3I3jG6uTRazCwxwqFGkufLR5Moz2tnMJsktNYpAK15U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a11580957beb32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":157458,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-29T04:06:12.628559Z","times_seen":44430,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin-api.axendra.net/profile/upload/2026/03/31/XAG_20260331212931A032.png?2.2.1775007331435","fqdn":"admin-api.axendra.net","domain":"axendra.net","tld":"net"},"ip":{"addr":"172.67.191.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.000Z","timestamp":1782406552000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axendra.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 10:33:14 GMT","end":"Wed, 29 Jul 2026 10:33:13 GMT"},"fingerprint":{"sha1":"8B:40:47:86:95:B2:5D:94:71:00:15:4D:55:7A:56:2D:09:1A:76:E9","sha256":"4F:5C:25:3E:6A:08:70:A8:79:5A:ED:94:E2:F3:07:BF:BD:2F:84:CB:36:B2:27:36:5F:8C:34:FC:97:2D:0E:D7"}}},"request":{"raw":"GET /profile/upload/2026/03/31/XAG_20260331212931A032.png?2.2.1775007331435 HTTP/1.1\r\nHost: admin-api.axendra.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:52 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Tue, 31 Mar 2026 13:29:31 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nage: 49\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SyHhRwOcw1G4e4rAGoW5KKesZrvmtdTIwh7jEpvie0GL942WNlhHeO7svdKV0jFClWyVVZS4G26A4mKRNmmnVmlHTHD%2FqYk08b4TjYbkwqXgnS2%2FZWwNMCnkFNxmAY0Vn0faqlgDhb8%3D\"}]}\r\ncf-ray: a11580960a08c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3709,"size_decoded":4311,"mime_type":"image/png","magic":"PNG image data, 175 x 175, 8-bit/color RGBA, non-interlaced","md5":"7e1ddb42827d5c733630b83fe606da64","sha1":"2b0f8157615cc6a0beb8693af2d95a2e3d366d96","sha256":"728beba6152c2865961d2dbe53076a880d2f36af3e65918175dc5db4a91a63be","sha512":"325a35f1e6d00ccaf102f167e818488d5faa70b6f083d0acab50a24dfa37fe72da0df085a087423cc134a246c8e09b58c6875c12be866a0d894c39daed75c42d","ssdeep":"","tlshash":"c471095d25d14062d2e00554fa3e85e2f7710dff925dc6ee0080b3fb792528a91b675f","first_seen":"2026-06-18T17:24:19.217927Z","last_seen":"2026-06-25T16:56:23.824705Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/assets/info-8jGgH4UQ.js","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.094Z","timestamp":1782406550094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /assets/info-8jGgH4UQ.js HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CL7Z%2FLeXmzz7xD3SeCI5n5sWf7sgbNxmbuYqF53ewL4gs1GCY1rCoFAduQMi15yYbNYjP0uDN4%2FBgZOCPjxKjoSna7BKbhsY0w86z%2B107ojkFXhT2JCgBC8wLvrStO4%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 01:35:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 26 Jun 2026 04:54:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1,i=?0\r\nage: 51\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69cc7662-90\"\r\ncf-ray: a115808a1bea35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":905,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"9e6a110839fe0206e04108324e0c4d64","sha1":"b1b4c9ae3b7736d63bf38bbe2efb90e722efebeb","sha256":"fece73d946ae1890740daa6bd811c66927b5c78e3eb6a9123ed25ff86a3b9fc1","sha512":"f6adaa688e6853169c02be726f8b19fd40ef5a42c4ed6a6a823994912be77a0461ccf79e4e921563aac48dd1297bde7805b34491c2081900c084e52b840b1c80","ssdeep":"","tlshash":"e6c02b0b0d0243f3023918d033d00e1711a2087c2f834ffc00198e054cf4883901d914","first_seen":"2026-04-06T13:09:14.689529Z","last_seen":"2026-06-25T16:56:23.825282Z","times_seen":11,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.citihnwi.com/kline","fqdn":"h5-api.citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:52.037Z","timestamp":1782406552037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://citihnwi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:57 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://citihnwi.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2auSdFHBdUkp%2FJnwdZSwke3NdQYOie%2FM0N79SkeXLdK4CHWOCL1qg30TXrwd7r72KMGfdeHAQqcmxqhAYkgYdq%2FFj5P48eyB1eGsm%2FKeTppnswP6wH%2BwKrBiVoO31v7DoBtJhrgv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a115809aef1ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40750,"size_decoded":11234,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"44929e9f70fae63015b31d4fc6079f39","sha1":"573e6ea1d4435db3152339693d5c3f14c3166df1","sha256":"fd5a5f93f835615045e2ab28e95f779b73faac4d8037a720434b26162c3e8c1e","sha512":"88aa5ec5dfc01c838c1f363707271a7e74a3ad1e2148dc40d5dba44c7d64590f732bf993ef9b14b283253c5fbce7cda2cb7a895463bf2daa614ca6835d250714","ssdeep":"768:+AbKN5BK2xfCfLncIjfHYZr2IUMEmRWKks:+AbKN5BK2gLcIjfHYZr2IULZKks","tlshash":"ac034334d99dc689d571ac9f2ff7bee0850635d34bcd9cc204892c0c7b54236a36a7aa","first_seen":"2026-06-25T16:56:23.825885Z","last_seen":"2026-06-25T16:56:23.825885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4235,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/resource/images/dark/next.png?2.2.1775007331435","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:51.931Z","timestamp":1782406551931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /resource/images/dark/next.png?2.2.1775007331435 HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:51 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9zkWuNaIx0BfU8ojycE0sTvyYME%2BLR5sGFHx2ubGDlESJBBdAWHq69ek0%2Fv1kX8XdChISX9YU01iGjmN1Kj8kZbdNXMULsoTYtBb9tJ23lhHoG4Zbd59UUIJTt66FE%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\netag: \"69cc763a-336\"\r\nexpires: Sat, 25 Jul 2026 16:55:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 48\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 822\r\ncf-ray: a11580959cee35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":822,"size_decoded":1597,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"56f4c6bd26236cec628eca09228bd623","sha1":"0c0cd20cdad0053d2d88d9b2a9bdb45aa7548bb3","sha256":"bc7f7a772a5fef50a9499daf268bb6f82b915b33c10c2a2cf8afe24ec77da77a","sha512":"fdde6c6101a816389398341a64f8dd37cb4bf13a6392fa0379b5b7889da00c16ae38792f51e8025be530c28ae5ea90842e6c3d7ed43b80db094000dbfd788a88","ssdeep":"","tlshash":"5e0186a5364ef13ef1c3c935e5340364cb3b4c38857c28aaf6d09d2694c0b49719135a","first_seen":"2025-10-12T16:34:39.767715Z","last_seen":"2026-06-25T16:56:23.826643Z","times_seen":100,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"citihnwi.com/platform/axendra/config.js?1782406550059","fqdn":"citihnwi.com","domain":"citihnwi.com","tld":"com"},"ip":{"addr":"104.21.91.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://citihnwi.com/","date":"2026-06-25T16:55:50.062Z","timestamp":1782406550062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"citihnwi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 18:36:37 GMT","end":"Tue, 22 Sep 2026 19:36:23 GMT"},"fingerprint":{"sha1":"71:B8:DF:F8:F6:B7:D7:C8:C4:5B:AE:70:1E:DD:B9:A6:75:0A:0D:6B","sha256":"ED:71:15:8E:A3:8D:29:69:BA:F2:4A:EE:8F:C2:D6:93:41:D4:8E:DA:A7:AB:35:50:7C:7C:36:79:AC:EA:1E:10"}}},"request":{"raw":"GET /platform/axendra/config.js?1782406550059 HTTP/1.1\r\nHost: citihnwi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 25 Jun 2026 16:55:50 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qU8JX%2Frl0W%2B3Aj2xYxTzJgg835xzIM9KvBEYmaVXBMxgXVGMAfShmhy4zTc3zowIZ7RtVti4KrW%2Bd466NYOoWKrdRHGGxMl2OfTDzpo%2FIhsrBTGcT7ceylSPXNVIGug%3D\"}]}\r\nlast-modified: Wed, 01 Apr 2026 01:34:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 26 Jun 2026 04:55:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"69cc763a-db\"\r\ncf-ray: a1158089ebdb35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219,"size_decoded":879,"mime_type":"application/javascript","magic":"ASCII text","md5":"bf4a50be346b56bbb39bbe0bc94cf4d3","sha1":"1da9457833f34ed3f043b0c77d7f8d35fcf555b5","sha256":"ea1cddbbe9b03685c2faaf79959af0139c3c5e3ae0f8eaf6409a4f026bb187d3","sha512":"6dd2d0596734826a559d310234c48c1a8f8c507afc2b656e64bd1d8b220c2f92d3b6911cf27912e9ef6f4940bf409cc42b9d761afcfb845f2c045cb195ded755","ssdeep":"","tlshash":"82d0c2f626b655853c44412f4ecc5931b1519237cc9e761d788d1c00af9f90c1a78432","first_seen":"2026-02-24T16:10:35.262693Z","last_seen":"2026-06-25T16:56:23.827343Z","times_seen":79,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":769,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}