{"report_id":"f2301e1a-61db-428e-9569-7da145afc1fa","version":6,"status":"done","tags":[],"date":"2026-02-14T04:16:43Z","url":{"schema":"https","addr":"hk141.vip/","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"172.67.190.69","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hk141.vip/","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"title":"香港高端模特管理 | Beautiful Afina","dom":{"size":252319,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11630)","md5":"554982cca340a1a6b51e21e7fbae6def","sha1":"7339cfbbfd11b690fc61ac9683ce6ea6009050f2","sha256":"4a8ccf06a8fa9ac58a6d981f2c74f2798d8e80e43b528625013d4f9af6f39791","sha512":"93b205c7c2feb5179c13a8f2617f9c74825fd4a9cdb3e87372b87e15691990e0a15222bbb75e46fe18b194f803a0bc2980b69ade32641e380751c4eae75ba7c9","ssdeep":"1536:TDA0agkOnK9H+mFeS7ImAAAXMJMeY8tyQyLC97BC8BVUbZHhmxeeOaD+DpB86iLc:zkxFeSZArJ/8nBybZHhsOaYYsQ8OW","tlshash":"d53441df5a739664d2bf33805a161a8567cab3327111d474b3ee89c84b5007efea2738","dom_hash":"domhashf3469ab60f76069c08e292ada183ff02","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hk141.vip/","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"172.67.190.69","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T04:16:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"hk141.vip","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-17","domain_rank":0,"first_seen":"2026-02-13T02:03:43.88684Z","last_seen":"2026-02-13T02:03:43.88684Z","alert_count":0,"request_count":9,"received_data":1727591,"sent_data":4500,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.matomo.cloud","ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-09-08","domain_rank":124973,"first_seen":"2019-09-27T14:00:38Z","last_seen":"2026-02-11T14:31:27.381337Z","alert_count":0,"request_count":1,"received_data":140016,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hk141vip.matomo.cloud","ip":{"addr":"18.195.235.189","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2017-09-08","domain_rank":0,"first_seen":"2026-02-12T21:38:37.130745Z","last_seen":"2026-02-12T21:38:37.130745Z","alert_count":0,"request_count":1,"received_data":229,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hk141.vip/","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2013ac0c66b2e86d1e83e745c463f1b3","sha1":"24bb90dd087b27853406d2724970f57bb2021c14","sha256":"b6efd6e0061d049a8776b54e7da7299c2525452adb65119779ef4961ecb8d144","sha512":"cd96db32a8d12958a6abc89e2cf33d410bdf487cf87a8eaeea58f97d5068db4b5a43b6a3d01fd14aae0f37c95e84520c05d28ba29559c3be05b50da3d45919f8","ssdeep":"","tlshash":"1ef0e11609af1ffa323b627e3c7e8a1df3ab381d9090c4016e41941c6d61d9587003c8","size":563,"data":"","first_seen":"2026-02-13T02:03:50.633608Z","last_seen":"2026-02-14T04:17:13.801326Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"075dd85448cd0b46b4e27b9c1245c397","sha1":"13fdf2cba251dc9005ca9e614444ac2b3f401cba","sha256":"f97208e6e2d08b25229029e8ee94059d7904140d335b56f79dfec686a0f01026","sha512":"4ab08b3594b288af4d2d8aca6906a8c33c8f840384ca6538a4711c4cecdea60736fcbf0a305acb681dd13ce4b8e129897e47e1e5c24c4dde3227796305a981ca","ssdeep":"","tlshash":"e711975935bb906b9563f0a90b8f16903a6010033044da263f4c93120f9ae34ab71bc5","size":1062,"data":"","first_seen":"2026-02-13T02:03:50.635568Z","last_seen":"2026-02-14T04:17:13.802166Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a53d8bc6bd1f7458d620352d547e06d","sha1":"5b7999a8d24e826ea1a0e515620cfd19b24ea0bc","sha256":"84189cf99474ef260480cfd902369938be2a3142e9b7a1afa142a89fe6c39b57","sha512":"8b5a8143588908b44a58a8f274a507643706791261822d23632dc98674ef6ad2df638ac7d7367ffad370fd8ae0cfa347b2bef4299a516516076f97385f52322e","ssdeep":"1536:aFeS7ImAAAXMJMeY8tyQyLC97BC8BVUbZHhmxeeOaf:aFeSZArJ/8nBybZHhsOaf","tlshash":"2bf3bcdf5a33a7a4e2bf3340591629c967cab3353121d474a3eac8c9526017efea1734","size":159500,"data":"","first_seen":"2026-02-13T02:03:50.637106Z","last_seen":"2026-02-14T04:16:48.133296Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"07e326929868257be153b3d42e6ae057","sha1":"ba74436618eab060010f7adb9cfae1af21aa0205","sha256":"6e93d3a6e4ffc93a1c85fe06e64308f9b9a95a76dbe734cfd5b14c229c0f9bfe","sha512":"a9810f0e56515c27ce096cb3e0b3830cd4ac0e4125626ba19a580772fc28fd001f32bb8ceb26cb6f55fdd21ba66baa8f2f4a7d8e7c78d56be7d33fd9cdd652ce","ssdeep":"384:urbqQ8xJypV5ndzLjtXbY065Zmv0x1DpB8621L+5kT4c5B+s5dTncIBpgoR0twH6:+dqTDpB86iL+5kT4c5B+s5dTncIBpgSW","tlshash":"a9a2519a25f32420c65f316ffbaf4205797090037905da447e9c83852f97fa8e676bac","size":22790,"data":"","first_seen":"2026-02-13T02:03:50.638511Z","last_seen":"2026-02-14T04:16:48.135917Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.matomo.cloud/hk141vip.matomo.cloud/matomo.js","fqdn":"cdn.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf8b381329cc0aee32cb1b8b039f45a4","sha1":"4c3df5b37efad2433b0ce9797cf616b9054e73f8","sha256":"2aa5b34976102b9b3df357626c749e33cfe37a0e0031edfb40a3471c1d303a1c","sha512":"27024ab0f52f0897e4783d44c281bf863d459b91521402fff79f9e35a33de5705cb4d84e217a279cd68c1b63d472ce4ced4a9f9c70b01f5a974b99bdeca90bf0","ssdeep":"3072:AT+Z2fucXYy1PGJ9d1QkNw0CjBi4jZdV50tqv:ASUucfBGrd1HwBi4jZdV50tqv","tlshash":"e5d3088a72c2753a86db60b5543f110b733a9daa2448c0b8f625d4f63d78e0e553bf78","size":139327,"data":"","first_seen":"2026-02-05T13:16:52.117928Z","last_seen":"2026-05-18T14:30:39.242884Z","times_seen":658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f12cb9e815b5eec6e98f639b9e5f9c66","sha1":"eeb077e006e978a5b5134248a4bc07422687038f","sha256":"ef97460e9fa4dc626a872a1e8f7dce7dca8ff632ac7947ebf99661c971c4937a","sha512":"680b09a7787136a7af613d5de0f5c8d53a989ec4f212df09901b678d4465eed3a13007731a9f78d0a58de42d74dbaa8ffdff4d47b21517d19bc87d933aa3d7b4","ssdeep":"","tlshash":"1201f7bc92e108b010f3b476633ff6557936409334499d097e5d95d44faca1860e2e8f","size":761,"data":"","first_seen":"2026-02-14T04:16:48.138255Z","last_seen":"2026-02-14T04:16:48.138255Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T15:29:30.901899Z","times_seen":364010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hk141.vip/","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T04:16:20.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hk141.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 08:54:04 GMT","end":"Tue, 17 Mar 2026 09:50:09 GMT"},"fingerprint":{"sha1":"8C:3E:B0:1B:68:5B:6B:F5:E6:DF:4B:DE:39:B2:68:98:F1:FC:66:B0","sha256":"22:D8:9F:CD:A6:FA:46:67:E1:FB:FF:28:BD:6C:27:4A:68:01:12:C0:F9:09:99:D9:BF:B7:1E:38:4A:7A:D4:81"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hk141.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 04:16:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: PHPSESSID=28hgdp5i3ddq9d71thq3r5cepr; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJa3YLKdURdYkMw0wp%2B1m4BI1002LKA68VrCklVxXBRmj5%2B9lXBb2buBTtot8ry%2F1LMIqYoKdt3hTw%2Fxc1gTEqKYwSzsPciv4A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd9bfe04f24120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259744,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5569), with CRLF line terminators","md5":"00748a0ed27cc9c27854cab48cb9c774","sha1":"7bf40dc7d2e75b4e8d6ef20d8db83712c82dd5f9","sha256":"c4319d377b178ef3ca4c825393e0c14b60278e70a2ceb46787e54a67189d6a64","sha512":"d066b40b1b859e7009c9b27e9bff109bfcf8c2b7156c7bc72ecdb167ff3e39cde1d795fdbd4a2d9d431257f761767fd31d50007e0cd064885bfb0ad4c6901edd","ssdeep":"1536:C4TlZNgzLLyFeS7ImAAAXMJMeY8tyQyLC97BC8BVUbZHhmxeeILi+DZBi6OLy5/J:hIyFeSZArJ/8nBybZHhsILK69F9","tlshash":"3d4422df5a329664d2bf73405a121ac9e7c6b33271119474b3ee89c91b7007eee62738","first_seen":"2026-02-14T04:16:48.11084Z","last_seen":"2026-02-14T04:16:48.11084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":52,"dns":39,"connect":1,"send":0,"wait":117,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/style.css","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hk141.vip/","date":"2026-02-14T04:16:20.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hk141.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 08:54:04 GMT","end":"Tue, 17 Mar 2026 09:50:09 GMT"},"fingerprint":{"sha1":"8C:3E:B0:1B:68:5B:6B:F5:E6:DF:4B:DE:39:B2:68:98:F1:FC:66:B0","sha256":"22:D8:9F:CD:A6:FA:46:67:E1:FB:FF:28:BD:6C:27:4A:68:01:12:C0:F9:09:99:D9:BF:B7:1E:38:4A:7A:D4:81"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: hk141.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hk141.vip/\r\nCookie: PHPSESSID=28hgdp5i3ddq9d71thq3r5cepr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:16:20 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 14:52:32 GMT\r\npriority: u=2,i=?0\r\netag: \"68b9a7b0-6c0b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=22kHIIN0M9YSW7m9gV3rbXGlhbBoaq8RhQ2LOcok6PgAuyZUNl4bGLrNgEfKOmqw48hw%2BKK%2Bl1dE60wLbgdA6cPrLQyTkkLbNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9bfe229045ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27659,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1250), with CRLF line terminators","md5":"4fa1f6158576c1202ac0693db555072c","sha1":"f418e2cfc990afb4455ee5cc60a7e39727c6c3c2","sha256":"5fe445c15644e5c92856b0b45bf87fc34bf38b81565352b41d2e442eb1862653","sha512":"f6f73b1ad7a7c56086da1a053bc85910b1402302a729b2c1637987f49aab5979cd81ec9188ea7f37fd77793e9614d8b8b03bdfcb124c7790f5e681da4a218322","ssdeep":"192:TFtgu54XnedaIhW1iSAcojijeZH4bWN8tDSSFzXaH/eyAg8FVF5eZrNLtU3/Ljq2:TnaVqVz7WYcBr2c","tlshash":"f2c2da59ea421102b13baa78fff3474afb694023c706416c7aed62484fb90ad9561fcd","first_seen":"2026-02-13T02:03:50.630024Z","last_seen":"2026-02-14T04:17:13.796192Z","times_seen":4,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hk141.vip/","date":"2026-02-14T04:16:20.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hk141.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 08:54:04 GMT","end":"Tue, 17 Mar 2026 09:50:09 GMT"},"fingerprint":{"sha1":"8C:3E:B0:1B:68:5B:6B:F5:E6:DF:4B:DE:39:B2:68:98:F1:FC:66:B0","sha256":"22:D8:9F:CD:A6:FA:46:67:E1:FB:FF:28:BD:6C:27:4A:68:01:12:C0:F9:09:99:D9:BF:B7:1E:38:4A:7A:D4:81"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: hk141.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hk141.vip/\r\nCookie: PHPSESSID=28hgdp5i3ddq9d71thq3r5cepr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:16:20 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 14 Feb 2026 05:04:20 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2Bkb9dnuZ7A4YxYKMOrZdxI4ZGUbNZV5ChjGfT80HmrK0Weo0BJx%2BFrdcl8%2FLwO7UsVQ%2FzKjKscVjQuhDmGbTPWJ5165Cgsoog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9bfe2390f5ebd-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T15:29:30.901899Z","times_seen":364010,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.matomo.cloud/hk141vip.matomo.cloud/matomo.js","fqdn":"cdn.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"3.167.2.19","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hk141.vip/","date":"2026-02-14T04:16:20.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.matomo.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7B:9E:B2:8F:2C:21:F3:D8:CC:C3:78:9E:88:F2:FC:72:0C:FB:68:3A","sha256":"D7:E0:95:8B:B8:35:19:48:30:B8:87:D2:5F:82:0D:1D:DF:65:27:5C:9A:83:C6:2B:1B:9B:3F:9C:32:70:25:3C"}}},"request":{"raw":"GET /hk141vip.matomo.cloud/matomo.js HTTP/1.1\r\nHost: cdn.matomo.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hk141.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 14 Feb 2026 04:16:21 GMT\r\nlast-modified: Tue, 03 Feb 2026 22:26:20 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=691200\r\nx-amz-version-id: ViTZYre6uVZeoWLRB5x68BQ_NP8x3lFz\r\netag: W/\"cf8b381329cc0aee32cb1b8b039f45a4\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 42b1b4c2d68cc43ab5019609cede1d92.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 5XRQvRibbawZRshLJ1p43E7sjNEC8uFiEAaVNW17z9ONdWxvIUQbnA==\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"cf8b381329cc0aee32cb1b8b039f45a4","sha1":"4c3df5b37efad2433b0ce9797cf616b9054e73f8","sha256":"2aa5b34976102b9b3df357626c749e33cfe37a0e0031edfb40a3471c1d303a1c","sha512":"27024ab0f52f0897e4783d44c281bf863d459b91521402fff79f9e35a33de5705cb4d84e217a279cd68c1b63d472ce4ced4a9f9c70b01f5a974b99bdeca90bf0","ssdeep":"3072:AT+Z2fucXYy1PGJ9d1QkNw0CjBi4jZdV50tqv:ASUucfBGrd1HwBi4jZdV50tqv","tlshash":"e5d3088a72c2753a86db60b5543f110b733a9daa2448c0b8f625d4f63d78e0e553bf78","first_seen":"2026-02-05T13:16:52.117928Z","last_seen":"2026-05-18T14:30:39.242884Z","times_seen":658,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":28,"dns":23,"connect":1,"send":0,"wait":108,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/img/logo192.png","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hk141.vip/","date":"2026-02-14T04:16:21.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hk141.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 08:54:04 GMT","end":"Tue, 17 Mar 2026 09:50:09 GMT"},"fingerprint":{"sha1":"8C:3E:B0:1B:68:5B:6B:F5:E6:DF:4B:DE:39:B2:68:98:F1:FC:66:B0","sha256":"22:D8:9F:CD:A6:FA:46:67:E1:FB:FF:28:BD:6C:27:4A:68:01:12:C0:F9:09:99:D9:BF:B7:1E:38:4A:7A:D4:81"}}},"request":{"raw":"GET /img/logo192.png HTTP/1.1\r\nHost: hk141.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hk141.vip/\r\nCookie: PHPSESSID=28hgdp5i3ddq9d71thq3r5cepr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:16:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 8578\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 14:52:32 GMT\r\npriority: u=6,i=?0\r\netag: \"68b9a7b0-2182\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehmxL427d%2FU5%2BWgRXpYmL5R0Rdz4sE9CeZSU4c4EaggbfeGF8KZzdnJYbwtvMOhm7El55JW1MlXgmuDkP86%2Fwqc02EXxQby5QA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9bfe3dc875ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8578,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"66d8fd79c9ac900e0af95c7efc49b4d5","sha1":"796ad172750ba696f1351498360ab5a56bfe68e9","sha256":"3cbb57fd63c7b2b347b1832825d29b11ad5c427c4ad202fab83b1b8445463d7a","sha512":"170cb29af6cfe7bd040795d2fff843c7b520cb400d66fd4c4e1611505ff99fc937bd0bebd260fe2fffcab1121207def6f24ca17963fb3f04f4a1177d4ccb053c","ssdeep":"192:GjZqiOgo1KefBz7v0Ejf71L91/1KsqeFEYasA+TIDWwotyR8hc:YZIgj4l7cSfxL/srYXA+TIRooRyc","tlshash":"0b027ee1e1fa8b11fe406111a93e77586dc61ddc8fa9b7b8f30a49054b02d3725ed394","first_seen":"2026-02-13T01:46:39.853682Z","last_seen":"2026-02-14T04:17:13.798545Z","times_seen":6,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/uploads/Mila/4.jpg","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hk141.vip/","date":"2026-02-14T04:16:20.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hk141.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 08:54:04 GMT","end":"Tue, 17 Mar 2026 09:50:09 GMT"},"fingerprint":{"sha1":"8C:3E:B0:1B:68:5B:6B:F5:E6:DF:4B:DE:39:B2:68:98:F1:FC:66:B0","sha256":"22:D8:9F:CD:A6:FA:46:67:E1:FB:FF:28:BD:6C:27:4A:68:01:12:C0:F9:09:99:D9:BF:B7:1E:38:4A:7A:D4:81"}}},"request":{"raw":"GET /uploads/Mila/4.jpg HTTP/1.1\r\nHost: hk141.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hk141.vip/\r\nCookie: PHPSESSID=28hgdp5i3ddq9d71thq3r5cepr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:16:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 243315\r\nserver: cloudflare\r\nlast-modified: Wed, 14 Jan 2026 03:57:32 GMT\r\npriority: u=4,i=?0\r\netag: \"6967142c-3b673\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95pqcnauMTsYu0xUMTc8p6xdjuddHr6GU92jQIlZyprmyiOgXfvPkahfaRv64Z4T0wmquc5pfQdpVV8iuxmXJh4egp7KGC%2FUEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9bfe2390b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243315,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x2560, components 3","md5":"5f0f34c85c899510406831614f1a268c","sha1":"70a1579e89ac667c8619b6b38ab98535d66c336e","sha256":"a2ad2065f8a1a3bb1febb080133764bddefa0eec08c4db9fdc0de982ae345ddc","sha512":"34e26782bd2764acb8df03323db199e8932a462dc184fcacd8fa4c1e3106358a1245aadd15916dc7e97ca717481c2fabe92931803ff3e2848f8bf02b9e5a5615","ssdeep":"6144:wENf95S1wV+3BUqSKH48uVF5lsAOsMTnBZ2mORcXcgPvVnaNf+9:w+TcUYy7SAOsMj2mORPQna5i","tlshash":"3f34123fbb4a7917c7ce96f320d65f5d03579da4c8ee170c2ba210a0d8b05e66894bd8","first_seen":"2026-02-13T02:03:50.624437Z","last_seen":"2026-02-14T04:17:13.796986Z","times_seen":4,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/img/logo16.png","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hk141.vip/","date":"2026-02-14T04:16:21.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hk141.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 08:54:04 GMT","end":"Tue, 17 Mar 2026 09:50:09 GMT"},"fingerprint":{"sha1":"8C:3E:B0:1B:68:5B:6B:F5:E6:DF:4B:DE:39:B2:68:98:F1:FC:66:B0","sha256":"22:D8:9F:CD:A6:FA:46:67:E1:FB:FF:28:BD:6C:27:4A:68:01:12:C0:F9:09:99:D9:BF:B7:1E:38:4A:7A:D4:81"}}},"request":{"raw":"GET /img/logo16.png HTTP/1.1\r\nHost: hk141.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hk141.vip/\r\nCookie: PHPSESSID=28hgdp5i3ddq9d71thq3r5cepr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:16:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 697\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 14:52:32 GMT\r\npriority: u=6,i=?0\r\netag: \"68b9a7b0-2b9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmNBPEIzBCLYf%2FB1rxs%2FxAoj7Z%2Fs%2FVBpVJY4kFwlRVNzVP8mpjZSX4X82AsbJRO2TUl6Bu5oTKLe%2BEL6dy%2FOOcQcr6%2FCIUuAKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9bfe3dc895ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":697,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"bfb8170f87c9d08b7b028372f30a2fdd","sha1":"ce5be7a0e955b698c4a97ada4baafb86865de682","sha256":"5822cc20e421aadeeb2871cf8c9934839862bd4941c2e38c7bd467b2acbd56d7","sha512":"c774ed79d94cb2f4d6f08a7bf063fc52dea9e79c843b19709757ea6af6bfd6cd58088af70f41495ee3862b00a0427d979212bc4b33f26ae3fc36f1c902d155ba","ssdeep":"","tlshash":"c60144f3f5b3b944e96a1265143c3a04c876815f1ba51ee2a875d361d905b092dcc9cd","first_seen":"2026-02-13T01:46:39.65746Z","last_seen":"2026-02-14T04:17:13.787674Z","times_seen":6,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141vip.matomo.cloud/matomo.php?action_name=%E9%A6%99%E6%B8%AF%E9%AB%98%E7%AB%AF%E6%A8%A1%E7%89%B9%E7%AE%A1%E7%90%86%20%7C%20Beautiful%20Afina\u0026idsite=1\u0026rec=1\u0026r=334850\u0026h=4\u0026m=16\u0026s=21\u0026url=https%3A%2F%2Fhk141.vip%2F\u0026_id=5efbb46d63b4f961\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=M3c130\u0026pf_net=81\u0026pf_srv=117\u0026pf_tfr=23\u0026pf_dm1=295\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"hk141vip.matomo.cloud","domain":"matomo.cloud","tld":"cloud"},"ip":{"addr":"18.195.235.189","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://hk141.vip/","date":"2026-02-14T04:16:21.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.matomo.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 21 Apr 2025 00:00:00 GMT","end":"Wed, 20 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:11:4C:63:17:FD:99:09:3C:43:B7:CC:E0:3C:3D:1B:68:53:F3:19","sha256":"B0:CB:AA:8B:5C:DE:18:64:46:50:8B:3C:EF:2F:F8:94:E6:C3:D9:44:13:32:41:13:29:76:AB:D1:5A:E1:A0:1C"}}},"request":{"raw":"POST /matomo.php?action_name=%E9%A6%99%E6%B8%AF%E9%AB%98%E7%AB%AF%E6%A8%A1%E7%89%B9%E7%AE%A1%E7%90%86%20%7C%20Beautiful%20Afina\u0026idsite=1\u0026rec=1\u0026r=334850\u0026h=4\u0026m=16\u0026s=21\u0026url=https%3A%2F%2Fhk141.vip%2F\u0026_id=5efbb46d63b4f961\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=M3c130\u0026pf_net=81\u0026pf_srv=117\u0026pf_tfr=23\u0026pf_dm1=295\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: hk141vip.matomo.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://hk141.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hk141.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 14 Feb 2026 04:16:21 GMT\r\nserver: nginx\r\naccess-control-allow-origin: https://hk141.vip\r\naccess-control-allow-credentials: true\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T15:34:22.145557Z","times_seen":16243359,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":155,"dns":62,"connect":22,"send":0,"wait":117,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/uploads/Tracy/Tracy_1.jpg","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hk141.vip/","date":"2026-02-14T04:16:21.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hk141.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 08:54:04 GMT","end":"Tue, 17 Mar 2026 09:50:09 GMT"},"fingerprint":{"sha1":"8C:3E:B0:1B:68:5B:6B:F5:E6:DF:4B:DE:39:B2:68:98:F1:FC:66:B0","sha256":"22:D8:9F:CD:A6:FA:46:67:E1:FB:FF:28:BD:6C:27:4A:68:01:12:C0:F9:09:99:D9:BF:B7:1E:38:4A:7A:D4:81"}}},"request":{"raw":"GET /uploads/Tracy/Tracy_1.jpg HTTP/1.1\r\nHost: hk141.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hk141.vip/\r\nCookie: PHPSESSID=28hgdp5i3ddq9d71thq3r5cepr; _pk_id.1.faca=5efbb46d63b4f961.1771042581.; _pk_ses.1.faca=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:16:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 108607\r\nserver: cloudflare\r\nlast-modified: Sat, 07 Feb 2026 15:55:19 GMT\r\npriority: u=4,i=?0\r\netag: \"69876067-1a83f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYk%2FD3xVIh0JVD1hv%2BA2PpwJmbRZcDF29Bk3AqBcVMQyuwhNjkr%2B%2BlV1oXDPxNmnzJHs8lrbVyVw6pqS2dTMXmHr%2BaHiuvQH7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9bfe42d1a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108607,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1066x1280, components 3","md5":"cb71c5f9ffda34f2ab28703789d2ad2c","sha1":"2ef2b0e27f9c14e646e4156ebd7354131ef96048","sha256":"d74fdca203b0f9e9be0b9b74a505bd01dfcf3d56e41ba591eb3f2f301beb9511","sha512":"ca0a22f9bfdbae995811c4b965790da511a6f900f7ad9b5fe070670ebe0c54babcfea8c87a955fb1edb05abbdb4e8114ecba61eb43a6f5d93a0095c86e23c974","ssdeep":"3072:9Sf/XkhBwZf7cZcu+pMVqVi/jKmvEzaS+3:mnfA7+pMqSKmv6+","tlshash":"d1b3127a0a6020f14b5bc5740ab8431de393d8b80d4afbc1e09b27e369e419b6dff195","first_seen":"2026-02-13T02:03:50.631416Z","last_seen":"2026-02-14T04:17:13.785259Z","times_seen":4,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/uploads/Jasmin/1.jpg","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hk141.vip/","date":"2026-02-14T04:16:21.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hk141.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 08:54:04 GMT","end":"Tue, 17 Mar 2026 09:50:09 GMT"},"fingerprint":{"sha1":"8C:3E:B0:1B:68:5B:6B:F5:E6:DF:4B:DE:39:B2:68:98:F1:FC:66:B0","sha256":"22:D8:9F:CD:A6:FA:46:67:E1:FB:FF:28:BD:6C:27:4A:68:01:12:C0:F9:09:99:D9:BF:B7:1E:38:4A:7A:D4:81"}}},"request":{"raw":"GET /uploads/Jasmin/1.jpg HTTP/1.1\r\nHost: hk141.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hk141.vip/\r\nCookie: PHPSESSID=28hgdp5i3ddq9d71thq3r5cepr; _pk_id.1.faca=5efbb46d63b4f961.1771042581.; _pk_ses.1.faca=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:16:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 245976\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Jan 2026 10:38:42 GMT\r\npriority: u=4,i=?0\r\netag: \"6970acb2-3c0d8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F7t%2BySCL3I0bT7OxeDHT%2B%2BQMFwmqMXU9dhQZogSQtheo9tKebZRGpQ6fVB%2FfYEA8YjGsixbCEY6JxS6QgJrtdtpdUbCUE%2Bz80g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9bfe42d1f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245976,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1290x1912, components 3","md5":"332645b5847f31391cc7cb8c24c38c8f","sha1":"d95818a74eb22ebc321c5cb5cca9b86994c425e7","sha256":"4dc8e0369914a1ed526989883a845993f47fd9ec704ae6085c726e704708eb67","sha512":"372453f4a542a1497cd92b533810e90dd61758c2516f07df1f87086182cc7f6534a5863d4b2809b03b0a0222061efacfe3a186c0942052c2abd64067f4fe3b37","ssdeep":"6144:g2S62fQogKKgYcQCPgQFSWE5qpLjXaza0YYw:gC0/gKKpchMfALTGUYw","tlshash":"893423369faebac7e64c2a34b2c48017a8d754f2e1921114ee653773351b6f3a309b52","first_seen":"2026-02-13T02:03:50.628339Z","last_seen":"2026-02-14T04:17:13.794234Z","times_seen":4,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk141.vip/uploads/Darina/1.jpeg","fqdn":"hk141.vip","domain":"hk141.vip","tld":"vip"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hk141.vip/","date":"2026-02-14T04:16:21.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hk141.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 08:54:04 GMT","end":"Tue, 17 Mar 2026 09:50:09 GMT"},"fingerprint":{"sha1":"8C:3E:B0:1B:68:5B:6B:F5:E6:DF:4B:DE:39:B2:68:98:F1:FC:66:B0","sha256":"22:D8:9F:CD:A6:FA:46:67:E1:FB:FF:28:BD:6C:27:4A:68:01:12:C0:F9:09:99:D9:BF:B7:1E:38:4A:7A:D4:81"}}},"request":{"raw":"GET /uploads/Darina/1.jpeg HTTP/1.1\r\nHost: hk141.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hk141.vip/\r\nCookie: PHPSESSID=28hgdp5i3ddq9d71thq3r5cepr; _pk_id.1.faca=5efbb46d63b4f961.1771042581.; _pk_ses.1.faca=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:16:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 825728\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jan 2026 15:06:34 GMT\r\npriority: u=4,i=?0\r\netag: \"697782fa-c9980\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RZsI17FF%2F7g%2BpcH%2FTo3I8W%2FaWyF5Jg04VtMrwf2%2Fcvo33wFmf6yMgQfI2UBgSle%2Fg29jhEG%2B1RK8wDZLfenxLpc0Z3p6OTOzMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9bfe42d225ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":825728,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x2560, components 3","md5":"304d9d2b7ba1bb56802ee6e80632e8f0","sha1":"33e4b61957fb47580613d5424244899edec1356f","sha256":"95e204ecc990f4106f8ea033c3224f30f8f75cd7b00c47da99c945609528af34","sha512":"8e96d5b5f0d8c5bcad5c26ce90fa2cd100869a971ebc7d964c04454f3abddd8133b85220e6439d14519f435e1d636bb3c80b49f275657c0895355529b29da140","ssdeep":"12288:N70Z5KwNuaOYMbmE/HZc77ILtiy+xWF1syYn1IS51c49HvfBW2wNrh53vA0E1:e5KlAHytuWQbvFdBW2wJDe1","tlshash":"f605bee98d45b8c7a09f43a2a44f1f0e3a795315eb793ce455ca4fa7bf1472308ba508","first_seen":"2026-02-13T02:03:50.621674Z","last_seen":"2026-02-14T04:17:13.786555Z","times_seen":4,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}