GET accounts.google.com/gsi/client
200 OK 242 kB URL GET accounts.google.com/gsi/client
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subjectaccounts.google.com
FingerprintBC:3A:20:55:47:6C:AF:90:A0:22:C3:30:DA:31:36:4A:92:62:DE:3D
ValidityMon, 23 Jun 2025 08:42:22 GMT - Mon, 15 Sep 2025 08:42:21 GMT
File type JavaScript source, ASCII text, with very long lines (2261)
Size 242 kB (241498 bytes)
Hash 33541464e84e41a55fc7ade116509a09
ee4c5d10a62e5b750f123e33dee488d8e6b53e66
33d614ca43f14a262c273f0a948d8b5f57b10ee7d65dcd251d65af2f39bbaaa0
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
expires: Thu, 17 Jul 2025 09:20:10 GMT
date: Thu, 17 Jul 2025 09:20:10 GMT
cache-control: private, max-age=1800
content-security-policy: script-src 'nonce-5xUQRxWbNlMpn6rROcZ6YA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/p/1889/L1/315/3/custom_VND.avif?web_v=v6.2.95
200 OK 28 kB URL GET safwee.mailax889.com/game_pictures/p/1889/L1/315/3/custom_VND.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash a1f9ad7c8f42d3dafeee74fd5e12b8ef
288d31a0c0ec4d59becde04e9fa936c8d68a3269
6f1c0de79bc22e200dc858a145009394457847c75865c8db148862b0e4f90d7f
GET /game_pictures/p/1889/L1/315/3/custom_VND.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 28123
set-cookie: acw_tc=2ff6309717527440109008044e5624f21d9a82ba187ca65444c9ba0b32;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440109008044e5624f21d9a82ba187ca65444c9ba0b32;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F594307992E427670
vary: Origin
accept-ranges: bytes
etag: "A1F9AD7C8F42D3DAFEEE74FD5E12B8EF"
last-modified: Wed, 16 Jul 2025 11:48:22 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8238081488348462964
x-oss-storage-class: Standard
cache-control: public,s-maxage=86400,max-age=2592000,stale-while-revalidate=86400,immutable,proxy-revalidate
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: ofmtfI9C09r+7nT9XhK47w==
x-oss-server-time: 2
via: cache1.l2fr1[0,0,200-0,H], cache17.l2fr1[1,0], ens-cache12.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:232748159
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 82730
timing-allow-origin: *
eagleid: 2ff6309717527440109008044e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/lobby/aboutUs/index/getInfo/language/vi.json
200 OK 128 B URL GET safwee.mailax889.com/hall/api/lobby/aboutUs/index/getInfo/language/vi.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 519a5053f95086db947f72ebfea6bb73
53dcf14d4b0dbf88f66999b5251da94cc18aedfb
287b984a813f2078456028f989f6bcd93ae5bd9a0f3ddd00a12e0189f26ce4e7
GET /hall/api/lobby/aboutUs/index/getInfo/language/vi.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 128
set-cookie: acw_tc=2ff6309717527440112088529ef9688b35bbb5183c6d2ee75f6ca798b6;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440112088529ef9688b35bbb5183c6d2ee75f6ca798b6;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:11 GMT
x-oss-request-id: 6878C04B13F9D41AA88CC67D
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: UZpQU/lQhtuUf3Lr/qa7cw==
x-oss-server-time: 2
via: cache32.l2fr1[227,227,304-0,H], cache23.l2fr1[229,0], ens-cache11.nl3[295,322,200-0,H], ens-cache3.nl3[333,0]
vary: Origin
etag: "519A5053F95086DB947F72EBFEA6BB73"
last-modified: Mon, 14 Jul 2025 19:07:44 GMT
x-oss-hash-crc64ecma: 15432688410913276087
age: 0
ali-swift-global-savetime: 1752744011
x-cache: HIT TCP_REFRESH_HIT dirn:1:428675106
x-swift-savetime: Thu, 17 Jul 2025 09:20:11 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440112088529e
X-Firefox-Spdy: h2
OPTIONS fvsdt.ax88aa.top/hall/ipCheck?siteCode=1889¤cy=VND&language=vi&platformType=5
200 OK 0 B URL OPTIONS fvsdt.ax88aa.top/hall/ipCheck?siteCode=1889¤cy=VND&language=vi&platformType=5
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /hall/ipCheck?siteCode=1889¤cy=VND&language=vi&platformType=5 HTTP/1.1
Host: fvsdt.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: appsystem,appversion,auth,browserfingerid,browsertype,clienttimezone,currency,device,devicebrand,devicemodel,devicetype,domain,language,nonce,operatingsystem,physicaldevicemodel,platformtype,sign,sitecode,timestamp,token,webauthndomain,x-custom-referer,x-data-mode,x-device,x-object-id,x-request-id,x-version
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/octet-stream
content-length: 0
set-cookie: acw_tc=2ff630a017527440158956622e36717756cf6e94b8f28b7893205a3c29;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440158956622e36717756cf6e94b8f28b7893205a3c29;path=/;HttpOnly;Max-Age=3600
acw_tc=0a0ccab817527440162136120e43952dda5224eb57be95a580ac766aba1339;path=/;HttpOnly;Max-Age=1800
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:16 GMT
access-control-allow-methods: *
access-control-max-age: 3600
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: appsystem,appversion,auth,browserfingerid,browsertype,clienttimezone,currency,device,devicebrand,devicemodel,devicetype,domain,language,nonce,operatingsystem,physicaldevicemodel,platformtype,sign,sitecode,timestamp,token,webauthndomain,x-custom-referer,x-data-mode,x-device,x-object-id,x-request-id,x-version
access-control-expose-headers: X-Trace-ID, newjwt, token
via: cache21.l2fr1[470,470,200-0,M], cache21.l2fr1[472,0], ens-cache12.nl3[492,492,200-0,M], ens-cache12.nl3[502,0]
ali-swift-global-savetime: 1752744016
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:16 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 2ff630a017527440158956622e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/active/quickList/currency/VND/language/vi.json?v=1752740096
200 OK 2.2 kB URL GET safwee.mailax889.com/hall/api/active/quickList/currency/VND/language/vi.json?v=1752740096
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (2240), with no line terminators
Hash 00073fb016c16b5975795e2b17b63561
4ae88c9f7d35edc17abad92fa56ee09b2710cb42
7190e585c646cf21f4d282e325ab7aefb0dab3345768079ef2eeae43e5a9fdf4
GET /hall/api/active/quickList/currency/VND/language/vi.json?v=1752740096 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 1755
set-cookie: acw_tc=2ff6309717527440196706372eda0488f4ecd7b1d02a467300c6b3bd5a;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440196706372eda0488f4ecd7b1d02a467300c6b3bd5a;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:19:14 GMT
x-oss-request-id: 6878C012DA25D35C4F8C5E3E
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
vary: Accept-Encoding, Origin
last-modified: Thu, 17 Jul 2025 08:14:56 GMT
x-oss-hash-crc64ecma: 7904482674606374452
content-md5: AAc/sBbBa1l1eV4rF7Y1YQ==
x-oss-server-time: 2
content-encoding: gzip
via: cache10.l2fr1[0,0,200-0,H], cache25.l2fr1[1,0], ens-cache6.nl3[22,22,200-0,M], ens-cache3.nl3[24,0]
age: 65
ali-swift-global-savetime: 1752743954
x-cache: MISS TCP_MISS dirn:12:135547498
x-swift-savetime: Thu, 17 Jul 2025 09:20:19 GMT
x-swift-cachetime: 535
timing-allow-origin: *
eagleid: 2ff6309717527440196706372e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/lobby/config/getAppDownloadInfo.json?v=1752722035
200 OK 2.9 kB URL GET safwee.mailax889.com/hall/api/lobby/config/getAppDownloadInfo.json?v=1752722035
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (2880), with no line terminators
Hash 2119ccbbbe57addf1dffc3ed49de17bc
05303a0d1503a4ec7b0aed10b9a34bb5755f4386
e640c129649d9ed8b3fd4277d98008acad0323538b1ba8f984130a24732b71b8
GET /hall/api/lobby/config/getAppDownloadInfo.json?v=1752722035 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 2244
set-cookie: acw_tc=2ff6309717527440196756385eef646f95e8234cd79054848c2ee54f56;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440196756385eef646f95e8234cd79054848c2ee54f56;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:11:26 GMT
x-oss-request-id: 6878BE3EDE6693A18B70887D
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: IRnMu75Xrd8d/8PtSd4XvA==
x-oss-server-time: 2
via: cache21.l2fr1[0,0,304-0,H], cache29.l2fr1[1,0], ens-cache3.nl3[0,0,200-0,H], ens-cache3.nl3[0,0]
vary: Accept-Encoding, Origin
last-modified: Thu, 17 Jul 2025 03:13:55 GMT
x-oss-hash-crc64ecma: 3842435785743106903
content-encoding: gzip
age: 533
ali-swift-global-savetime: 1752743486
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:18 GMT
x-swift-cachetime: 68
timing-allow-origin: *
eagleid: 2ff6309717527440196756385e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/common/comm_icon_gou.svg?manualVersion=1&version=v6.2.95
200 OK 446 B URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/common/comm_icon_gou.svg?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash fb9c464a7bf2bb7d90c9cc20a8f5444f
be60d64def64da2c5cfd0414a00d2ff588c12b06
e89fbe2caecbdd670f6c99d42aefe82b447d618c34df51f544f1acee61f52a7c
GET /siteadmin/skin/lobby_asset/common/web/common/comm_icon_gou.svg?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/svg+xml
content-length: 446
set-cookie: acw_tc=2ff6309717527440207738768e6d83c1620bffa06b12e61b3c8de66caa;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440207738768e6d83c1620bffa06b12e61b3c8de66caa;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:20 GMT
x-oss-request-id: 6878C05472F0666F5586D09E
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
etag: "FB9C464A7BF2BB7D90C9CC20A8F5444F"
last-modified: Tue, 15 Jul 2025 12:00:58 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10173272335333948012
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: +5xGSnvyu32QycwgqPVETw==
x-oss-server-time: 3
via: cache1.l2fr1[201,201,200-0,M], cache38.l2fr1[202,0], ens-cache11.nl3[223,223,200-0,M], ens-cache3.nl3[224,0]
ali-swift-global-savetime: 1752744020
x-cache: MISS TCP_MISS dirn:11:431917929
x-swift-savetime: Thu, 17 Jul 2025 09:20:20 GMT
x-swift-cachetime: 604800
timing-allow-origin: *
eagleid: 2ff6309717527440207738768e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_DownloadDialogsChunk.DroXSrMk.css
200 OK 34 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_DownloadDialogsChunk.DroXSrMk.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (33645)
Hash 395400f9f9676c92d84e35abc0149032
bea82f3b92ad635420f5803cb0a35bde84faf941
8928d163dc79e5b2325c0b63bbd8e3dbb54522683cda234abb4ba1cda589ccf3
GET /assets/themes/2_DownloadDialogsChunk.DroXSrMk.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 7044
date: Thu, 17 Jul 2025 07:22:43 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-836e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: D6PZuNjPVDeSC1HKWnbx_H5IOBsOJdgKzSufx14ZYCOVlLRSsk7vsQ==
GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-.A8YjVvVB.js
200 OK 304 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-.A8YjVvVB.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (60088)
Size 304 kB (303880 bytes)
Hash 68535f6a07083d5498833721e76c1721
e1f2f2101585bd2caa4625af9e03745a8968b5e5
563c9652b0ec66dafcf428750dda440a3d00c7bd8df17c6b2bf1ad8ba5fdf768
GET /assets/vendors/vendor-.A8YjVvVB.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/index.DzkESG6a.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 7043
date: Thu, 17 Jul 2025 07:22:44 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:36 GMT
etag: W/"6877a4cc-4a308"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: W9_nGm1oJ-caxL3Xj3IKT3hRP5hyXyeq58xUHXlpGA7PeWVWSoOv7g==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/common/home/cjc1_style_1_bg.avif?manualVersion=1&version=v6.2.95
200 OK 40 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/common/home/cjc1_style_1_bg.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash b8976eaf303c9a738808a56aa8d83f4c
c1d9ab55c68f5686438454f109aad509ff1affe6
135fcc1d847100e5863f049683d1c4e92abedfc47889461fd203515ace84ae69
GET /siteadmin/skin/lobby_asset/common/common/home/cjc1_style_1_bg.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 40349
set-cookie: acw_tc=2ff6309717527440108908027ebe8962a65f925e505824458d1ee7aeee;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440108908027ebe8962a65f925e505824458d1ee7aeee;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F1E3C92E64D261E25
vary: Origin
accept-ranges: bytes
etag: "B8976EAF303C9A738808A56AA8D83F4C"
last-modified: Tue, 15 Jul 2025 11:53:21 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5100650004838771446
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: uJdurzA8mnOICKVqqNg/TA==
x-oss-server-time: 4
via: cache18.l2fr1[0,0,200-0,H], cache17.l2fr1[2,0], ens-cache2.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:291554821
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440108908027e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/active/tasks/newcomer_benefit_reward/default.json?v=1752740439
200 OK 1.8 kB URL GET safwee.mailax889.com/hall/api/active/tasks/newcomer_benefit_reward/default.json?v=1752740439
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (1772), with no line terminators
Hash 6a11645c97e501a25b61a9a49daadad9
5b52e5fe7b8895119d602f80b5c60be1e319aebf
7f38affeb80a0ddcbdd5628e3ee771af22b88788a0f2f11db806fc7363ab7f5b
GET /hall/api/active/tasks/newcomer_benefit_reward/default.json?v=1752740439 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 1410
set-cookie: acw_tc=2ff6309717527440118191728ee9359173173b3efde23de23fe866a0ff;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440118191728ee9359173173b3efde23de23fe866a0ff;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:12 GMT
x-oss-request-id: 6878C04CDA25D35C4F8D2F5F
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Thu, 17 Jul 2025 08:20:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7484583437090168893
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: ahFkXJflAaJbYamknara2Q==
x-oss-server-time: 2
content-encoding: gzip
via: cache29.l2fr1[257,257,200-0,M], cache32.l2fr1[258,0], ens-cache11.nl3[325,325,200-0,M], ens-cache3.nl3[326,0]
ali-swift-global-savetime: 1752744012
x-cache: MISS TCP_MISS dirn:12:14324039
x-swift-savetime: Thu, 17 Jul 2025 09:20:12 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440118191728e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-swiper.CoXUCMPL.css
200 OK 25 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-swiper.CoXUCMPL.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (24555)
Hash 62969e2091dbbfb534454be94155e731
44338e52f955d955a597485f9d7f9d605dd04a9f
a604dfa4233199eaa49cce3d38d3828b7961c31d129a8f7116a62f5118b47143
GET /assets/vendors/vendor-swiper.CoXUCMPL.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 2245042
server: AliyunOSS
date: Sat, 21 Jun 2025 09:42:44 GMT
x-oss-request-id: 68567E948E4DB93431CDB620
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Tue, 17 Jun 2025 07:17:34 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2900298986903795848
x-oss-storage-class: Standard
x-oss-meta-version: v6.1.62
cache-control: max-age=31622400
content-md5: YpaeIJHbv7U0RUvpQVXnMQ==
x-oss-server-time: 5
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: w11bWW8Mo44oKQKJ2RnMQb-aOrJrkuy-Z2mEPRtDlnOXRFKlsi_hJg==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1tg.avif?manualVersion=1&version=v6.2.95
200 OK 2.0 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1tg.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 434f03ec465643720adc755cd8daddba
8092d6a655e9efd04e8c48cc9713e59045c638e4
d56198da4d40452edbaee12442a345a2ce5827ba73e70697ab25f75ab292c48f
GET /siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1tg.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1966
set-cookie: acw_tc=2ff6309717527440108147899e6312fc6920ed16934117424e23ae80fe;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440108147899e6312fc6920ed16934117424e23ae80fe;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F72F0666F55334BB4
vary: Origin
accept-ranges: bytes
etag: "434F03EC465643720ADC755CD8DADDBA"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16090960269069411111
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: Q08D7EZWQ3IK3HVc2Nrdug==
x-oss-server-time: 9
via: cache19.l2fr1[0,0,200-0,H], cache25.l2fr1[1,0], ens-cache10.nl3[0,0,200-0,H], ens-cache3.nl3[3,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:529977392
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440108147899e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/g/CL/200/3/2000087/default.avif?web_v=v6.2.95
200 OK 12 kB URL GET safwee.mailax889.com/game_pictures/g/CL/200/3/2000087/default.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash f592da8e3a28898c8a2712300581ba19
c780d650f0b395e162b591565f15b431527bce23
a23f84a43965952d61f63283d2f09c0f8020313e6e5304db1149a74c417c77ba
GET /game_pictures/g/CL/200/3/2000087/default.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 11757
set-cookie: acw_tc=2ff6309717527440115421171e95b4ffa6131eb99c47bc5e25f75935fa;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440115421171e95b4ffa6131eb99c47bc5e25f75935fa;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F13F9D41AA8399040
vary: Origin
accept-ranges: bytes
etag: "F592DA8E3A28898C8A2712300581BA19"
last-modified: Wed, 16 Jul 2025 11:20:14 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11034582195939746175
x-oss-storage-class: Standard
cache-control: max-age=2678400,stale-while-revalidate=86400,immutable,proxy-revalidate,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: 9ZLajjooiYyKJxIwBYG6GQ==
x-oss-server-time: 4
via: cache32.l2fr1[0,0,200-0,H], cache36.l2fr1[1,0], ens-cache7.nl3[0,0,200-0,H], ens-cache3.nl3[3,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:150066040
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 2674729
timing-allow-origin: *
eagleid: 2ff6309717527440115421171e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/3_WithdrawSubDialogsChunk.BekwdlJ9.css
200 OK 671 B URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/3_WithdrawSubDialogsChunk.BekwdlJ9.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (670)
Hash 0508184402a304101dd064fff29d4010
f9dec519e0a110e243f1345ea704a103eeec54f5
7d62e937ebe963520c7ad7f7cd77a35e845551ec51db76d95651813fbcdccf96
GET /assets/themes/3_WithdrawSubDialogsChunk.BekwdlJ9.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
content-length: 671
age: 4314
date: Thu, 17 Jul 2025 08:08:26 GMT
accept-ranges: bytes
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: "6877a4c9-29f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
vary: Origin
x-amz-cf-id: 9lpOANWxhUM6ja2LZILBb6Dl-CDtziyJLIQ9uut391I0EmKEz0T3NA==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/FixedInBottomNoClose.B1WyjTbk.css
200 OK 25 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/FixedInBottomNoClose.B1WyjTbk.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (24962)
Hash 606445f848ad65fa2bc4f43d14d38a4a
12ed53b256b4d1af5d840fe36346635a73bc9202
ba9411d6602423120e221c9efd789d48ce7543c0c498b77ee8c53500c8796555
GET /assets/themes/FixedInBottomNoClose.B1WyjTbk.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4316
date: Thu, 17 Jul 2025 08:08:14 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-6183"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -ODubJ0hNnd_zN32t1psGCNaq1lCJy5rxnoK4sSb9blcQtfkrIflTw==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/Style4Index.6LAnAAYp.js
200 OK 26 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/Style4Index.6LAnAAYp.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (26231)
Hash aafb903e4ab6aeb51825d71da4a813c0
ee7fcc48c4a718d569f2080ab26c05cffc294cb8
7435ecfd697a0d7226431f075e9e13639b4af601ff1a27ef01d7a468754f39f2
GET /assets/themes/Style4Index.6LAnAAYp.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/FixedInBottomNoClose.B7W1uct6.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4314
date: Thu, 17 Jul 2025 08:08:21 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-66af"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H0vsVUpC0TJb-2hfC9RRLa50gPUyMMkQktzEt9qxvRa9VAXeqRqWVQ==
GET safwee.mailax889.com/hall/api/active/tasks/pop_taskThreeDay/currency/VND/language/vi.json?v=1752740104
200 OK 192 B URL GET safwee.mailax889.com/hall/api/active/tasks/pop_taskThreeDay/currency/VND/language/vi.json?v=1752740104
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash cbd2ba2c6aeaf7f605beef2a92552f96
00680aebd3f0893ff76177885ecf2e52debc63f2
3523f2015df15e6edfe1c6fc24780b55fa6ff8f9c5899dcc4a4d60d4688e15e5
GET /hall/api/active/tasks/pop_taskThreeDay/currency/VND/language/vi.json?v=1752740104 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 192
set-cookie: acw_tc=2ff6309717527440172432029e7319f4cdb2ef3840c9558052e6813609;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440172432029e7319f4cdb2ef3840c9558052e6813609;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:11:32 GMT
x-oss-request-id: 6878BE44EE8E2834AA95F82C
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
vary: Origin
etag: "CBD2BA2C6AEAF7F605BEEF2A92552F96"
last-modified: Thu, 17 Jul 2025 08:15:04 GMT
x-oss-hash-crc64ecma: 8371201884891638411
content-md5: y9K6LGrq9/YFvu8qklUvlg==
x-oss-server-time: 1
via: cache18.l2fr1[0,0,200-0,H], cache37.l2fr1[0,0], ens-cache2.nl3[22,22,200-0,M], ens-cache3.nl3[23,0]
age: 525
ali-swift-global-savetime: 1752743492
x-cache: MISS TCP_MISS dirn:11:28899393
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 75
timing-allow-origin: *
eagleid: 2ff6309717527440172432029e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/active/active_popRecharge/currency/VND/language/vi.json?v=1752739413
200 OK 1.4 kB URL GET safwee.mailax889.com/hall/api/active/active_popRecharge/currency/VND/language/vi.json?v=1752739413
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (1368), with no line terminators
Hash 65233e08d098c4173da4c73c96190fe7
d377b223087c57451727103b803196c9c366af75
a9c19aa48096604c45988c39a6fa83eb9637030628dc2d5f3f7e79d1ae45036b
GET /hall/api/active/active_popRecharge/currency/VND/language/vi.json?v=1752739413 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 1107
set-cookie: acw_tc=2ff6309717527440208228898e149952c9b45e4b224dbbba66e4247707;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440208228898e149952c9b45e4b224dbbba66e4247707;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:11:28 GMT
x-oss-request-id: 6878BE4033781BE32A71BB39
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
vary: Accept-Encoding, Origin
last-modified: Thu, 17 Jul 2025 08:03:33 GMT
x-oss-hash-crc64ecma: 1086036337014477862
content-md5: ZSM+CNCYxBc9pMc8lhkP5w==
x-oss-server-time: 2
content-encoding: gzip
via: cache22.l2fr1[0,0,200-0,H], cache29.l2fr1[0,0], ens-cache3.nl3[22,21,200-0,M], ens-cache3.nl3[23,0]
age: 532
ali-swift-global-savetime: 1752743488
x-cache: MISS TCP_MISS dirn:12:396720175
x-swift-savetime: Thu, 17 Jul 2025 09:20:20 GMT
x-swift-cachetime: 68
timing-allow-origin: *
eagleid: 2ff6309717527440208228898e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/0_WithdrawChunk.C1eGKugb.js
200 OK 215 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/0_WithdrawChunk.C1eGKugb.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (64247)
Size 215 kB (214916 bytes)
Hash c4a8843aaa3dc83a43297093eeb11d34
df4cf05c221b34b596bfa023d51005c8a25824b5
1d7723e0c92883c02e34624d0649d43daa004ebe557aea108c7a5332e9fd6a2e
GET /assets/themes/0_WithdrawChunk.C1eGKugb.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/index.DzkESG6a.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 7043
date: Thu, 17 Jul 2025 07:22:44 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-34784"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nDBRsipEhvsEJGSd5O02LXzWzznJgXd-v9iSMEbeV0jIRQjlXu5aZw==
GET safwee.mailax889.com/cocos/lg/h5icon.ico
200 OK 4.3 kB URL GET safwee.mailax889.com/cocos/lg/h5icon.ico
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Hash 176772dc31c710d7d60ead38b751bbae
48f539ef08f8bfbf3bb34e291e28ada5609997df
16ab162207da88739f40f90f1c44e0c35e606a9f0dc67ff4b10e9f734eeb817f
GET /cocos/lg/h5icon.ico HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/x-icon
content-length: 4286
set-cookie: acw_tc=2ff6309717527440083423912e864c5d025fc26b0d015f4e166f8ea42a;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440083423912e864c5d025fc26b0d015f4e166f8ea42a;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 23:39:04 GMT
x-oss-request-id: 68783818DA25D35C4FB2BDE2
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=86400,public,max-age=1800
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: F2dy3DHHENfWDq04t1G7rg==
x-oss-server-time: 2
via: cache35.l2fr1[814,814,304-0,H], cache16.l2fr1[816,0], ens-cache5.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
vary: Origin
etag: "176772DC31C710D7D60EAD38B751BBAE"
last-modified: Wed, 16 Jul 2025 11:08:50 GMT
x-oss-hash-crc64ecma: 9361925633882556213
age: 34864
ali-swift-global-savetime: 1752709144
x-cache: HIT TCP_HIT dirn:12:105077059
x-swift-savetime: Wed, 16 Jul 2025 23:39:04 GMT
x-swift-cachetime: 86400
timing-allow-origin: *
eagleid: 2ff6309717527440083423912e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/locales/vi.BXjQguuS.js
200 OK 414 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/locales/vi.BXjQguuS.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (54570), with no line terminators
Size 414 kB (414387 bytes)
Hash bd038b49c12730f6d907a90c52cbfeda
784a0ee705cf358f2d7ce17251bf5fb40f9fd29b
e5286b9bdf2a978e399a1ebc240228687b52a18071880a0952fd1ccb6b102b8d
GET /assets/locales/vi.BXjQguuS.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/commonChunk.CM7oI4Iq.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 7042
date: Thu, 17 Jul 2025 07:22:46 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:36 GMT
etag: W/"6877a4cc-652b3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xClF4KvQtbn7tXILrq6nUIsm7EoSxCchhodrG3UzVNF8NBUlvYAE0g==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_ItemIndexChunk.Di7dRst3.js
200 OK 22 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_ItemIndexChunk.Di7dRst3.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (20105)
Hash c1279ae63a3b35f456d77e0ae2123b94
dbeb774517c026ea7f72348a0d7dc75234d4e742
2610df0a9f62c576d2cff99035180b425704e6f4be7b6a5a9b6b9901755d966a
GET /assets/themes/2_ItemIndexChunk.Di7dRst3.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/Style4Index.6LAnAAYp.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4313
date: Thu, 17 Jul 2025 08:08:22 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-53d0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: q9-eHtkpu1wz2kNL6ESzyGFnC2JP5frlV5AgPnLc12V-_6UW0jYscg==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/StyleIndex.DVJxlvAl.css
200 OK 17 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/StyleIndex.DVJxlvAl.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (16700)
Hash 0732e861e85114d98fe5545d1ddac528
41a152c6a8a44ce4a91621d053748586dcf8c16b
0bf392d689dd992e3dafd26be677417adf69d5897983b8525ec502cf60ecefff
GET /assets/themes/StyleIndex.DVJxlvAl.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4313
date: Thu, 17 Jul 2025 08:08:24 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-413d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jg5qvSUbWCuY2fmyLOQlcmmVIwz46Y-kaJ9mGl7slC9lv3eXgh445g==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/OutrightIndex.D_vVffig.css
200 OK 14 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/OutrightIndex.D_vVffig.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (13770)
Hash 35eb0fd0fbca14a8663146386c89c095
9241932b62db52eb1bf8c16bbcf0e4f1588106ff
bb3604d4f11d1165867633855fd3c263c2af24e106d7e965e0ae67f2084ac096
GET /assets/themes/OutrightIndex.D_vVffig.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4313
date: Thu, 17 Jul 2025 08:08:24 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-35cb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mVB8zovrZzX-lbSvqPBagtgt8tYKnxBvqpn5gpHxp9pxZqlzpEHZCQ==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/0_EmbeddedChunk.RgaYgg8l.js
200 OK 15 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/0_EmbeddedChunk.RgaYgg8l.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (14344)
Hash 82d5f06e160abb1bf8c10f630bedd0d8
1c06e411838e07ce7d6bf5b5ac8954ba4e1a9918
793d25ba7609aa964535b6ba1feec3eb4346abae308bd14c6d7798ccd78a1f2d
GET /assets/themes/0_EmbeddedChunk.RgaYgg8l.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/StyleIndex.D6P3FLvQ.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4312
date: Thu, 17 Jul 2025 08:08:26 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-3ba2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Lg_voQSgKPG51DxpFkR0Qvu4w81tlHv5qWlYcuDFKI-JIQsphSlZTw==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/FastEntryIndex.Cu_hm6wc.css
200 OK 1.8 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/FastEntryIndex.Cu_hm6wc.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (1801)
Hash 0a222d68d3649fc1625f74e66d94e40d
52e60d9151673e643e942278d7a090c666baf20f
775bae203d47dfb033358293ac5f94d36cb95ded71871efcfc879dc2ad5ee51e
GET /assets/themes/FastEntryIndex.Cu_hm6wc.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4317
date: Thu, 17 Jul 2025 08:08:21 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-70a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4BjP3sCiUduWP1dkbpSnb_YPoZKYnNC0seGo5FRIKwBE_0Zid6bHBQ==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/index.bxGFW-Bq.css
200 OK 21 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/index.bxGFW-Bq.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (21088)
Hash 25d5cb31f927343c83ef49bb6b8b3954
01ec2183c9856592e68020e1e3f9505e7bc53674
56386175adb41f8b10fec6a3e289bb59592e5e4dbfbb12f3fd9686eea75459fd
GET /assets/themes/index.bxGFW-Bq.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 7044
date: Thu, 17 Jul 2025 07:22:43 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-5261"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LdvZg4eDqAU1Y92Pi5yqhm10pLlrg5KBZZfqHW7zMfe6Md2pRSX2CQ==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_NoticePageChunk.CY5im_ZO.css
200 OK 70 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_NoticePageChunk.CY5im_ZO.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 29c3e2d811cececdde5db601fa53303f
e2190129acee9c1afd3300655d5a844d34795979
1f37a25eb9b6e8b30e64adb84dc839c5049b05b1a87927952fbbf5bd3324fb8f
GET /assets/themes/2_NoticePageChunk.CY5im_ZO.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4316
date: Thu, 17 Jul 2025 08:08:14 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-11073"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Vrb-wW_ARITJWh9q2HgiKg6fHe6AoX2EB0OdpOSj0-YDJ6ko6N1vQw==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/common/bg_pattern_tile.avif?manualVersion=1&version=v6.2.95
200 OK 526 B URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/common/bg_pattern_tile.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 889285a3419ee717af24134ebf9411e8
3a82160c1e70b69766d21866a5ccc4e4b26bf85e
12daba66ca4ca0f1d1dad673e985c7931d59ab582107c66a16f69319d0a787ed
GET /siteadmin/skin/lobby_asset/1-0-11/common/common/bg_pattern_tile.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 526
set-cookie: acw_tc=2ff6309717527440108147893e3885bdd67b31d0de5b3f9e630f2d5ac0;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440108147893e3885bdd67b31d0de5b3f9e630f2d5ac0;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79FB724A51CFE2D3DED
vary: Origin
accept-ranges: bytes
etag: "889285A3419EE717AF24134EBF9411E8"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7665308491089984100
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: iJKFo0Ge5xevJBNOv5QR6A==
x-oss-server-time: 5
via: cache8.l2fr1[0,0,200-0,H], cache5.l2fr1[1,0], ens-cache2.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:17818516
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440108147893e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/FixedInBottomNoClose.B7W1uct6.js
200 OK 34 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/FixedInBottomNoClose.B7W1uct6.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (32710)
Hash a26447a878993b03db4143851c17a681
2d79ffedcbf3a84b2834ace7fe856a259814156b
8c8823fecd8f258e15fc1c2b0b06485d2401c5cb0b0003e9602c662e7bc1592c
GET /assets/themes/FixedInBottomNoClose.B7W1uct6.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/OfficeChannelIndex.DLVJObjn.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4315
date: Thu, 17 Jul 2025 08:08:19 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-8368"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1nyXFhvvWBE4VFmLnhfvyr2iZEvkdmL0JyUeGQU0uZFc1PqCcnfMUg==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/FastEntryIndex.BvgX1HkH.js
200 OK 6.2 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/FastEntryIndex.BvgX1HkH.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (6121)
Hash abcb561a9506db66ae272ec1efacad93
b7777a169d23a9157e5c52d863d39c38bd7357e6
a72968ef2b9a613e667bd7ec8a9687ac516b9c055d8af8c56b3f72759b6c97db
GET /assets/themes/FastEntryIndex.BvgX1HkH.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/commonChunk.CM7oI4Iq.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4317
date: Thu, 17 Jul 2025 08:08:22 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-181e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _iftySbLQWLE3_kJ74B6J1hM5BNLYbMWNzfLb0LYjVciYAxfHmzAdA==
GET safwee.mailax889.com/game_pictures/g/CL/315/2/3150082/default.avif?web_v=v6.2.95
200 OK 8.9 kB URL GET safwee.mailax889.com/game_pictures/g/CL/315/2/3150082/default.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 4a17b36f7407f40c7340588cd4cc7722
ce0942d7fc37a70b3990166db929cda0eb447fe7
7ab7aeea078842b21a4bf113e8ee9d87a4a6b41440207d2beaafffbdad820b12
GET /game_pictures/g/CL/315/2/3150082/default.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 8881
set-cookie: acw_tc=2ff6309717527440115591211e1fe10e521720c79214e509672ecac827;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440115591211e1fe10e521720c79214e509672ecac827;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:04 GMT
x-oss-request-id: 6878A7A8EE8E2834AA49C670
vary: Origin
accept-ranges: bytes
etag: "4A17B36F7407F40C7340588CD4CC7722"
last-modified: Wed, 16 Jul 2025 11:20:21 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 55408647786135221
x-oss-storage-class: Standard
cache-control: max-age=2678400,stale-while-revalidate=86400,immutable,proxy-revalidate,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: Shezb3QH9AxzQFiM1Mx3Ig==
x-oss-server-time: 6
via: cache26.l2fr1[0,0,200-0,H], cache23.l2fr1[2,0], ens-cache1.nl3[0,0,200-0,H], ens-cache3.nl3[0,0]
age: 6307
ali-swift-global-savetime: 1752737704
x-cache: HIT TCP_HIT dirn:11:567650338
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 2674738
timing-allow-origin: *
eagleid: 2ff6309717527440115591211e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/ssocdn.txt
200 OK 2 B URL GET safwee.mailax889.com/siteadmin/ssocdn.txt
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a60852f204ed8028c1c58808b746d115
b0a98216a32426b9e66a4ac1eb6df2e96e1b495c
843ac01149cced785dfebd0028d3b03ba78e286e1c6f9517ebfcdb609d97af4c
GET /siteadmin/ssocdn.txt HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/plain
content-length: 2
set-cookie: acw_tc=2ff6309717527440187635077ec009886328c06df75e6428f596472ad1;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440187635077ec009886328c06df75e6428f596472ad1;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 12:59:07 GMT
x-oss-request-id: 6877A21B690BB9DF0F1B82DF
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: pghS8gTtgCjBxYgIt0bRFQ==
x-oss-server-time: 3
via: cache36.l2fr1[0,0,304-0,H], cache38.l2fr1[1,0], ens-cache11.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
vary: Origin
etag: "A60852F204ED8028C1C58808B746D115"
last-modified: Thu, 15 May 2025 13:40:19 GMT
x-oss-hash-crc64ecma: 13902551060587900831
age: 73271
ali-swift-global-savetime: 1752670747
x-cache: HIT TCP_HIT dirn:11:242993741
x-swift-savetime: Wed, 16 Jul 2025 23:39:07 GMT
x-swift-cachetime: 48000
timing-allow-origin: *
eagleid: 2ff6309717527440187635077e
X-Firefox-Spdy: h2
OPTIONS fvsdt.ax88aa.top/hall/api/gohal/heartbeat
200 OK 0 B URL OPTIONS fvsdt.ax88aa.top/hall/api/gohal/heartbeat
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /hall/api/gohal/heartbeat HTTP/1.1
Host: fvsdt.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: appsystem,appversion,auth,browserfingerid,browsertype,clienttimezone,currency,device,devicebrand,devicemodel,devicetype,domain,language,nonce,operatingsystem,physicaldevicemodel,platformtype,sign,sitecode,timestamp,token,webauthndomain,x-custom-referer,x-data-mode,x-device,x-object-id,x-request-id,x-version
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/octet-stream
content-length: 0
set-cookie: acw_tc=2ff630a017527440189373879eff4ad93c38934e4fd8c022f8dedd2bc9;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440189373879eff4ad93c38934e4fd8c022f8dedd2bc9;path=/;HttpOnly;Max-Age=3600
acw_tc=0a094e3317527440190191083e40da1e3452f82d71760b28ea4134b5ea52ff;path=/;HttpOnly;Max-Age=1800
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:19 GMT
access-control-allow-methods: *
access-control-max-age: 3600
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: appsystem,appversion,auth,browserfingerid,browsertype,clienttimezone,currency,device,devicebrand,devicemodel,devicetype,domain,language,nonce,operatingsystem,physicaldevicemodel,platformtype,sign,sitecode,timestamp,token,webauthndomain,x-custom-referer,x-data-mode,x-device,x-object-id,x-request-id,x-version
access-control-expose-headers: X-Trace-ID, newjwt, token
via: cache21.l2fr1[234,234,200-0,M], cache21.l2fr1[235,0], ens-cache12.nl3[256,255,200-0,M], ens-cache12.nl3[257,0]
ali-swift-global-savetime: 1752744019
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:19 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 2ff630a017527440189373879e
X-Firefox-Spdy: h2
GET dgrer.olympus9a.com/siteadmin/ssocdn.txt
200 OK 2 B URL GET dgrer.olympus9a.com/siteadmin/ssocdn.txt
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subjectdgrer.olympus9a.com
FingerprintF2:55:3F:C0:9F:17:6A:06:6C:C9:54:C9:90:83:96:F3:C4:F2:71:C0
ValidityTue, 20 May 2025 12:23:29 GMT - Mon, 18 Aug 2025 13:23:28 GMT
File type ASCII text, with no line terminators
Hash a60852f204ed8028c1c58808b746d115
b0a98216a32426b9e66a4ac1eb6df2e96e1b495c
843ac01149cced785dfebd0028d3b03ba78e286e1c6f9517ebfcdb609d97af4c
GET /siteadmin/ssocdn.txt HTTP/1.1
Host: dgrer.olympus9a.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 17 Jul 2025 09:20:19 GMT
content-type: text/plain
content-length: 2
x-oss-request-id: 6877A21DDA25D35C4F29F91A
vary: Origin, Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
etag: "A60852F204ED8028C1C58808B746D115"
last-modified: Thu, 15 May 2025 13:40:19 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13902551060587900831
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
content-disposition: attachment
x-oss-force-download: true
content-md5: pghS8gTtgCjBxYgIt0bRFQ==
x-oss-server-time: 1
cf-cache-status: HIT
age: 9074
accept-ranges: bytes
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 9608a9a7af80568a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-swiper.CGEhtrpu.js
200 OK 104 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-swiper.CGEhtrpu.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 104 kB (103909 bytes)
Hash 47179fb1458e350f8edb3f7fc561dfa6
b846c5726fc6d41f98233e05a48c1a6b9dffdef0
ef5efcddf800b478772dd288141f539d43ed261546c54a78ad5eca1a524586ba
GET /assets/vendors/vendor-swiper.CGEhtrpu.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/index.DzkESG6a.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript
alt-svc: h3=":443"; ma=86400
age: 2255192
server: AliyunOSS
date: Sat, 21 Jun 2025 06:53:34 GMT
x-oss-request-id: 685656EE637FD23031C87BBC
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
etag: W/"47179FB1458E350F8EDB3F7FC561DFA6"
last-modified: Tue, 17 Jun 2025 07:17:34 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11890246563348260368
x-oss-storage-class: Standard
x-oss-meta-version: v6.1.62
cache-control: max-age=31622400
content-md5: RxefsUWONQ+O2z9/xWHfpg==
x-oss-server-time: 7
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vL6IlzaEu8AJO2hgFyX9vdi4M3GdixxM1Aum2MHWDoi07hk18L8Wfg==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_EventDialogsChunk.CU4FZrWg.css
200 OK 101 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_EventDialogsChunk.CU4FZrWg.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 101 kB (100878 bytes)
Hash 0c31fb15f0f4bbea2e75319603755229
c01785bde615f9ae5d7e45c5ac974ce8563c2dbb
ba6895664db9c1b30b80649171774c23890d81cd752ecdf68894acf822aa19c5
GET /assets/themes/2_EventDialogsChunk.CU4FZrWg.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4316
date: Thu, 17 Jul 2025 08:08:14 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-18a0e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jtQS93wtmn41i-jkup_B98wjbF8KCwTxr6-Qmp49oyp7dl4VJURY0w==
GET safwee.mailax889.com/hall/api/lobby/channel/go/getChannelInfoById/id/1089047/info/channel.json?v=1752738233
200 OK 1.3 kB URL GET safwee.mailax889.com/hall/api/lobby/channel/go/getChannelInfoById/id/1089047/info/channel.json?v=1752738233
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (1260), with no line terminators
Hash b04d8d367dad9756e99d23d8c6ef4bf5
7f868164d1d42d112fae89e70fd85f5152a9023d
030883dd54cfacb74c8070f598988af9a34e3ed08cd10a4ae703d08ed46b7dff
GET /hall/api/lobby/channel/go/getChannelInfoById/id/1089047/info/channel.json?v=1752738233 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 1026
set-cookie: acw_tc=2ff6309717527440157027772e7edbd9516932fbc179049ea6525eb37e;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440157027772e7edbd9516932fbc179049ea6525eb37e;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:15 GMT
x-oss-request-id: 6878C04F1E3C92E64D79CF3E
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: sE2NNn2tl1bpnSPYxu9L9Q==
x-oss-server-time: 1
via: cache1.l2fr1[233,233,304-0,H], cache37.l2fr1[234,0], ens-cache2.nl3[256,257,200-0,H], ens-cache3.nl3[258,0]
vary: Accept-Encoding, Origin
last-modified: Wed, 16 Jul 2025 02:15:37 GMT
x-oss-hash-crc64ecma: 8446310977686912714
content-encoding: gzip
age: 0
ali-swift-global-savetime: 1752744015
x-cache: HIT TCP_REFRESH_HIT dirn:11:17840038
x-swift-savetime: Thu, 17 Jul 2025 09:20:15 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440157027772e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
200 OK 125 kB URL User Request GET d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (64343), with no line terminators
Size 125 kB (124983 bytes)
Hash 7d4416eff0dbd8d8074be636e5f40ae8
b287a98a5d060034bc4528ff7b9b06d384b2f5d0
0d6d0bb6795b3ed7f23e61fce292d71bf217bb8443c2544ac1400befc703a72e
GET /?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047 HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
date: Thu, 17 Jul 2025 09:20:06 GMT
cache-control: s-maxage=600,max-age=0,public
content-encoding: br
set-cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191;path=/;HttpOnly;Max-Age=1800
x-powered-by: Express
web-cache-status: DYNAMIC
etag: W/"1e837-soepil0GADS8RSj/e5sG04Sy9dA"
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: lZoeJifE5wMffVCu3jKi0ONhHndNNv9k2NA1A6qzLBlN4_0_vtJUhQ==
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/0_WithdrawChunk.B-OJM_M2.css
200 OK 32 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/0_WithdrawChunk.B-OJM_M2.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (32455)
Hash 238b60eb6fdfc215deccb5ca646518de
750c403beaa3c57386008fb8b23098d97dab5488
273d8cd2641a37804c070392afebae839ad6125d501e545e08e1894975ff0f4b
GET /assets/themes/0_WithdrawChunk.B-OJM_M2.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 7044
date: Thu, 17 Jul 2025 07:22:43 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-7ec8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y4jj1araup8flWauCs1jFQUb8w2eAdvgHqLxA2wi6lUIdP_iJ_bWmQ==
GET safwee.mailax889.com/game_pictures/g/CL/315/3/3150109/default.avif?web_v=v6.2.95
200 OK 12 kB URL GET safwee.mailax889.com/game_pictures/g/CL/315/3/3150109/default.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 719cc94ec00a875e4a638f1e201fb0fa
530e67939180fa77c81ffa1290f25a755b67daac
3693e554eb309c27e56bfc64caf39e375a5d71a88e9a63fb7c208257dd06ca9e
GET /game_pictures/g/CL/315/3/3150109/default.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 11961
set-cookie: acw_tc=2ff6309717527440115541201e6e291df868b2d73bd6a8360227bce394;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440115541201e6e291df868b2d73bd6a8360227bce394;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:06 GMT
x-oss-request-id: 6878A7A9DE6693A18B2459F4
vary: Origin
accept-ranges: bytes
etag: "719CC94EC00A875E4A638F1E201FB0FA"
last-modified: Wed, 16 Jul 2025 11:20:21 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8730578680817114801
x-oss-storage-class: Standard
cache-control: max-age=2678400,stale-while-revalidate=86400,immutable,proxy-revalidate,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: cZzJTsAKh15KY48eIB+w+g==
x-oss-server-time: 5
via: cache3.l2fr1[0,0,200-0,H], cache17.l2fr1[1,0], ens-cache12.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6305
ali-swift-global-savetime: 1752737706
x-cache: HIT TCP_HIT dirn:12:585898025
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 2674740
timing-allow-origin: *
eagleid: 2ff6309717527440115541201e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/lobby/channel/go/getChannelInfoById/id/1089047/info/channel.json?v=1752738233
200 OK 1.3 kB URL GET safwee.mailax889.com/hall/api/lobby/channel/go/getChannelInfoById/id/1089047/info/channel.json?v=1752738233
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (1260), with no line terminators
Hash b04d8d367dad9756e99d23d8c6ef4bf5
7f868164d1d42d112fae89e70fd85f5152a9023d
030883dd54cfacb74c8070f598988af9a34e3ed08cd10a4ae703d08ed46b7dff
GET /hall/api/lobby/channel/go/getChannelInfoById/id/1089047/info/channel.json?v=1752738233 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 1026
set-cookie: acw_tc=2ff6309717527440196756386eb69e1a09a2fd124241f08eca7f9a4fac;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440196756386eb69e1a09a2fd124241f08eca7f9a4fac;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:15 GMT
x-oss-request-id: 6878C04F1E3C92E64D79CF3E
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: sE2NNn2tl1bpnSPYxu9L9Q==
x-oss-server-time: 1
via: cache1.l2fr1[233,233,304-0,H], cache37.l2fr1[234,0], ens-cache2.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
vary: Accept-Encoding, Origin
last-modified: Wed, 16 Jul 2025 02:15:37 GMT
x-oss-hash-crc64ecma: 8446310977686912714
content-encoding: gzip
age: 4
ali-swift-global-savetime: 1752744015
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:15 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440196756386e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/active/tasks/pop_taskDay/currency/VND/language/vi.json?v=1752743789
200 OK 920 B URL GET safwee.mailax889.com/hall/api/active/tasks/pop_taskDay/currency/VND/language/vi.json?v=1752743789
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (920), with no line terminators
Hash b802d14f6bf7471627d7b2aee5663bc4
a162fdd07088ea0911616f428126483dc8bf3059
64520fa92ad756f1f8fbe20f8960ebeb7e9f20a7662eb4df8028889bace2b749
GET /hall/api/active/tasks/pop_taskDay/currency/VND/language/vi.json?v=1752743789 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 920
set-cookie: acw_tc=2ff6309717527440223243276edf4c8759c887684fd4919036465e597b;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440223243276edf4c8759c887684fd4919036465e597b;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:17 GMT
x-oss-request-id: 6878C0517DAC2C0B33979F19
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
etag: "B802D14F6BF7471627D7B2AEE5663BC4"
last-modified: Thu, 17 Jul 2025 09:16:29 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 14350589325804072098
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: uALRT2v3RxYn17Ku5WY7xA==
x-oss-server-time: 6
via: cache10.l2fr1[233,232,200-0,M], cache23.l2fr1[234,0], ens-cache11.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 5
ali-swift-global-savetime: 1752744017
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440223243276e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/1_PromotionChunk.Dm6BAY-K.css
200 OK 134 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/1_PromotionChunk.Dm6BAY-K.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 134 kB (134396 bytes)
Hash dceb9423326a129d5ed43483c424b6a1
780ea682c4b77f889cc652241be4e598074e662e
9676fa13ca29505a1f66ac2acdbb40a3fd9c98613cd51ab74ffc74ed6a270f1c
GET /assets/themes/1_PromotionChunk.Dm6BAY-K.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4316
date: Thu, 17 Jul 2025 08:08:14 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-20cfc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4WrQc8njQDlFYMQu8inRprCtB3E0nIatZCeD48QOcuzTfYwl1fXi-A==
POST fvsdt.ax88aa.top/hall/api/agent/promote/binding/reportViewV2
200 OK 80 B URL POST fvsdt.ax88aa.top/hall/api/agent/promote/binding/reportViewV2
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash b13eceae984cbf123bceac4791a01087
87dc2c89b5e36d3a5da013cf6b3b7384d542c731
84f21243a53523e005de0308e2586f02ee5d2a22ca54cc3c83594ce934653d61
POST /hall/api/agent/promote/binding/reportViewV2 HTTP/1.1
Host: fvsdt.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: vi
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-object-id: {"uid":"","browserLanguage":"en-US","init":{"device":"","created":1752744008113,"version":1752667351000}}
platformType: 5
devicetype: 3
x-device: 1-5
x-data-mode: plain
x-request-id: 3132be53-fa55-4b8e-aa3d-e7bf8f7b07c5
device: 8f89dae3-1a57-4f86-bf7d-e6eea88a14de
currency: VND
timestamp: 1752744009
nonce: 3132be53-fa55-4b8e-aa3d-e7bf8f7b07c5
sign: AEZE5lzPqM9cTJor572r10ubr8jvkROVBq88D6vUCYAq83wdjCxEmpjDhG3Ccz1P
siteCode: 1889
language: vi
token: b2e3d672-9d88-47a7-81b4-9d7ffc62054f
auth: undefined
deviceModel: Firefox v134.0
physicalDeviceModel: unknown
operatingSystem: Windows
deviceBrand: unknown
browserType: Firefox v134.0
appSystem: Windows 10
domain: d3mnhu2agy852k.cloudfront.net
webauthnDomain: d3mnhu2agy852k.cloudfront.net
clienttimezone: 0
x-custom-referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
x-version: 6.2.95
browserfingerid:
appVersion: v6.2.95
Content-Length: 152
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json; charset=utf-8
content-length: 80
set-cookie: acw_tc=2ff630a017527440105545822e09c4449253b080dd9206751feea5ad5c;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440105545822e09c4449253b080dd9206751feea5ad5c;path=/;HttpOnly;Max-Age=3600
acw_tc=0a094e3317527440106397039e40da81c27ba9d7ff1f5ec08af6f79d956bf6;path=/;HttpOnly;Max-Age=1800
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:10 GMT
api-cache: false
cache-control: no-cache
x-env-go-biz-agent-server: 0
x-env-go-biz-gateway: 0
x-server-version: 4.0.0
x-trace-id: 6962d427e9566caa
access-control-allow-methods: *
access-control-max-age: 3600
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: X-Trace-ID, newjwt, token
via: cache21.l2fr1[244,243,200-0,M], cache21.l2fr1[245,0], ens-cache12.nl3[266,265,200-0,M], ens-cache12.nl3[269,0]
ali-swift-global-savetime: 1752744010
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:10 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 2ff630a017527440105545822e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/lobby/webapi/forceUpdate/getForceUpdate.json?v=1752722035
200 OK 492 B URL GET safwee.mailax889.com/hall/api/lobby/webapi/forceUpdate/getForceUpdate.json?v=1752722035
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (492), with no line terminators
Hash ab520975968ad1c6e7fae79d455461bb
87eebbd3c76aaa27dc9fcc88fab22b9d25126524
32f83575e903c30e8e0f929571a8b97c053bdc1c837a1a44bec9c999ac30c4e3
GET /hall/api/lobby/webapi/forceUpdate/getForceUpdate.json?v=1752722035 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 492
set-cookie: acw_tc=2ff6309717527440190645504ed3160d5251599c924197dc15157c29e8;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440190645504ed3160d5251599c924197dc15157c29e8;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:11:27 GMT
x-oss-request-id: 6878BE3F690BB9DF0F786387
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: q1IJdZaK0cbn+uedRVRhuw==
x-oss-server-time: 1
via: cache2.l2fr1[0,0,304-0,H], cache10.l2fr1[1,0], ens-cache12.nl3[0,0,200-0,H], ens-cache3.nl3[0,0]
vary: Origin
etag: "AB520975968AD1C6E7FAE79D455461BB"
last-modified: Thu, 17 Jul 2025 03:13:55 GMT
x-oss-hash-crc64ecma: 14794755008682648377
age: 532
ali-swift-global-savetime: 1752743487
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:11 GMT
x-swift-cachetime: 76
timing-allow-origin: *
eagleid: 2ff6309717527440190645504e
X-Firefox-Spdy: h2
GET eregrtg.mahjong9a.com/ipacdn.txt
200 OK 2 B URL GET eregrtg.mahjong9a.com/ipacdn.txt
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subjecteregrtg.mahjong9a.com
Fingerprint9A:37:F1:5B:3A:71:61:29:5D:26:F6:FD:85:01:7F:15:1B:90:03:7D
ValidityThu, 29 May 2025 17:44:38 GMT - Wed, 27 Aug 2025 18:44:33 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /ipacdn.txt HTTP/1.1
Host: eregrtg.mahjong9a.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 17 Jul 2025 09:20:19 GMT
content-type: text/plain
content-length: 2
set-cookie: acw_tc=0a0ccab317527440189496263e5c1058c8621321aa6893f871e66f455a906c;path=/;HttpOnly;Max-Age=1800
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
cf-cache-status: BYPASS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 9608a9a52a20712e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/p/1889/L1/203/3/custom_VND.avif?web_v=v6.2.95
200 OK 20 kB URL GET safwee.mailax889.com/game_pictures/p/1889/L1/203/3/custom_VND.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 77ca5022592d83e4916ed3a136f0d46b
2fea76b2e6d4419d1fb663d2df461d8ebe16d3b9
d9616e121f1227f798ddf719b63a121f4740ba7f6f1e84fe62a7f5145142d238
GET /game_pictures/p/1889/L1/203/3/custom_VND.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 19904
set-cookie: acw_tc=2ff6309717527440109788165ed73e69efa84c44435d585226607a7337;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440109788165ed73e69efa84c44435d585226607a7337;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:03 GMT
x-oss-request-id: 6878A7A733781BE32A25956B
vary: Origin
accept-ranges: bytes
etag: "77CA5022592D83E4916ED3A136F0D46B"
last-modified: Wed, 16 Jul 2025 11:51:40 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9421780281662155037
x-oss-storage-class: Standard
cache-control: public,s-maxage=86400,max-age=2592000,stale-while-revalidate=86400,immutable,proxy-revalidate
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: d8pQIlktg+SRbtOhNvDUaw==
x-oss-server-time: 3
via: cache38.l2fr1[0,0,200-0,H], cache9.l2fr1[1,0], ens-cache4.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6307
ali-swift-global-savetime: 1752737703
x-cache: HIT TCP_HIT dirn:11:691470560
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 82738
timing-allow-origin: *
eagleid: 2ff6309717527440109788165e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/home/btn_sc_off_2.avif?manualVersion=1&version=v6.2.95
200 OK 1.0 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/home/btn_sc_off_2.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash f9b6a776dcb8e53a1e22c1c1a7db2b1e
52638a0c4fef4928975943596e67228a2b068de9
12f53b8b3a8f1b20e8e5ed3d3f5edfde34f5859d49d0055950828630f26d2695
GET /siteadmin/skin/lobby_asset/common/web/home/btn_sc_off_2.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1036
set-cookie: acw_tc=2ff6309717527440114248963e384c543b24327392b0b95db8946818f3;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440114248963e384c543b24327392b0b95db8946818f3;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F304E2EF85F189130
vary: Origin
accept-ranges: bytes
etag: "F9B6A776DCB8E53A1E22C1C1A7DB2B1E"
last-modified: Tue, 15 Jul 2025 11:53:26 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13757394480033944417
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: +bandty45ToeIsHBp9srHg==
x-oss-server-time: 4
via: cache26.l2fr1[0,0,200-0,H], cache39.l2fr1[1,0], ens-cache10.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:114402374
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 601129
timing-allow-origin: *
eagleid: 2ff6309717527440114248963e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/message/popupcfg/currency/VND.json?v=1752740016
200 OK 88 B URL GET safwee.mailax889.com/hall/api/message/popupcfg/currency/VND.json?v=1752740016
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 67a45982643c14bfdaf9596ab6eef66f
974023c3d7947258caa28386138825ea7e07e37c
4757471bb4039d9cb88794bfe83b3480718b01ebc3c17aa3201369d55ee6499e
GET /hall/api/message/popupcfg/currency/VND.json?v=1752740016 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 88
set-cookie: acw_tc=2ff6309717527440172452032e9e474f266ad89aca13001fa7950f6c2b;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440172452032e9e474f266ad89aca13001fa7950f6c2b;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:17 GMT
x-oss-request-id: 6878C051EE8E2834AA9CFA96
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
etag: "67A45982643C14BFDAF9596AB6EEF66F"
last-modified: Thu, 17 Jul 2025 08:13:36 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4206768714877918639
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: Z6RZgmQ8FL/a+Vlqtu72bw==
x-oss-server-time: 2
via: cache21.l2fr1[234,233,200-0,M], cache38.l2fr1[235,0], ens-cache11.nl3[299,299,200-0,M], ens-cache3.nl3[301,0]
ali-swift-global-savetime: 1752744017
x-cache: MISS TCP_MISS dirn:12:14310829
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440172452032e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/lobby/channel/go/getChannelInfoById/id/1089047/info/channel.json?v=1752738233
200 OK 1.3 kB URL GET safwee.mailax889.com/hall/api/lobby/channel/go/getChannelInfoById/id/1089047/info/channel.json?v=1752738233
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (1260), with no line terminators
Hash b04d8d367dad9756e99d23d8c6ef4bf5
7f868164d1d42d112fae89e70fd85f5152a9023d
030883dd54cfacb74c8070f598988af9a34e3ed08cd10a4ae703d08ed46b7dff
GET /hall/api/lobby/channel/go/getChannelInfoById/id/1089047/info/channel.json?v=1752738233 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 1026
set-cookie: acw_tc=2ff6309717527440184884616ef07bc1c22df57a2a5c715956a6567fe7;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440184884616ef07bc1c22df57a2a5c715956a6567fe7;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:15 GMT
x-oss-request-id: 6878C04F1E3C92E64D79CF3E
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: sE2NNn2tl1bpnSPYxu9L9Q==
x-oss-server-time: 1
via: cache1.l2fr1[233,233,304-0,H], cache37.l2fr1[234,0], ens-cache2.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
vary: Accept-Encoding, Origin
last-modified: Wed, 16 Jul 2025 02:15:37 GMT
x-oss-hash-crc64ecma: 8446310977686912714
content-encoding: gzip
age: 3
ali-swift-global-savetime: 1752744015
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:15 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440184884616e
X-Firefox-Spdy: h2
GET sdfasdf.ax88aa.top/ipacdn.txt
200 OK 2 B URL GET sdfasdf.ax88aa.top/ipacdn.txt
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /ipacdn.txt HTTP/1.1
Host: sdfasdf.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/plain
content-length: 2
set-cookie: acw_tc=2ff630a017527440187733654e9ec381a28fad2bfb2df758d35424fbf9;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440187733654e9ec381a28fad2bfb2df758d35424fbf9;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 29 May 2025 15:36:17 GMT
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
via: cache5.l2fr1[0,0,200-0,H], cache23.l2fr1[1,0], ens-cache12.nl3[0,0,200-0,H], ens-cache12.nl3[6,0]
age: 4211041
ali-swift-global-savetime: 1748532977
x-cache: HIT TCP_HIT dirn:12:179159138
x-swift-savetime: Thu, 12 Jun 2025 04:50:03 GMT
x-swift-cachetime: 314189174
timing-allow-origin: *
eagleid: 2ff630a017527440187733654e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/0_EntryLoginRegisterChunk.CdJnEeD4.css
200 OK 33 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/0_EntryLoginRegisterChunk.CdJnEeD4.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (33010)
Hash 5a9506178fe5c317513458c707cb35c0
56b2749bcaf66594e9ed1f63c83c524d1a9e3416
c93a00788fdf54ab865f7322a000404319ecced690f0f984b8a76b650bda6460
GET /assets/themes/0_EntryLoginRegisterChunk.CdJnEeD4.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4316
date: Thu, 17 Jul 2025 08:08:14 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-80f3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Yk0L8x225d7LDa3QG6ewFJkkdngeh4TV_MuGqlr8R_p8MfHR-Ygitw==
GET safwee.mailax889.com/siteadmin/upload/img/1945479168250691586.avif
200 OK 20 kB URL GET safwee.mailax889.com/siteadmin/upload/img/1945479168250691586.avif
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 2c6c4e5d27f26e22f1fde4f9862fc3ba
6c98cb2ee53d2531bb665773c2a5ba100ce1bd5a
ddf62c77fa0ba736f4e6713788494f4c45b3e3b990186901bdd52cac47591af9
GET /siteadmin/upload/img/1945479168250691586.avif HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 19791
set-cookie: acw_tc=2ff6309717527440108147890e96c1bdd5d19fe883fcf6275bd19e9941;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440108147890e96c1bdd5d19fe883fcf6275bd19e9941;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 13:58:37 GMT
x-oss-request-id: 6877B00DEE8E2834AA68DA85
vary: Origin
accept-ranges: bytes
etag: "2C6C4E5D27F26E22F1FDE4F9862FC3BA"
last-modified: Wed, 16 Jul 2025 13:42:34 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7054752510776640045
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: LGxOXSfybiLx/eT5hi/Dug==
x-oss-server-time: 6
via: cache17.l2fr1[0,0,200-0,H], cache15.l2fr1[1,0], ens-cache5.nl3[0,0,200-0,H], ens-cache3.nl3[10,0]
age: 69693
ali-swift-global-savetime: 1752674317
x-cache: HIT TCP_HIT dirn:12:298669414
x-swift-savetime: Wed, 16 Jul 2025 14:28:36 GMT
x-swift-cachetime: 84601
timing-allow-origin: *
eagleid: 2ff6309717527440108147890e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/OfficeChannelIndex.DLVJObjn.js
200 OK 32 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/OfficeChannelIndex.DLVJObjn.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (30841)
Hash 4f9ace96500cbde1966950635f74bdc3
addaf31ee624e9d8ff0f9e9d02b6b867981f97b8
5d913d16b44b00a1c06b0341e39da83702a0616d9a3afe979e6debac4243d4db
GET /assets/themes/OfficeChannelIndex.DLVJObjn.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/commonChunk.CM7oI4Iq.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4315
date: Thu, 17 Jul 2025 08:08:16 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-7c06"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pLdJwekhiJrUSiY5CDxe5jRh1lUrO-W7SyAbYSFlUxP6nNNPENUZ0Q==
GET safwee.mailax889.com/siteadmin/upload/img/1945449296777293825.avif
200 OK 64 kB URL GET safwee.mailax889.com/siteadmin/upload/img/1945449296777293825.avif
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash c2e6faffb414c75073eaa64bc6e899d5
145a00d333b18e5cbe8ea77091ed7d99ac0328c7
04365acf5dc50ddbf71f96a364798b3932208c5bed227a23c0ad7c6bd16b7056
GET /siteadmin/upload/img/1945449296777293825.avif HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 63583
set-cookie: acw_tc=2ff6309717527440155247506e6fcd9252a8123b82711618d7378258b1;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440155247506e6fcd9252a8123b82711618d7378258b1;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 11:50:31 GMT
x-oss-request-id: 68779207CC39EA4C5EF10D43
vary: Origin
accept-ranges: bytes
etag: "C2E6FAFFB414C75073EAA64BC6E899D5"
last-modified: Wed, 16 Jul 2025 11:43:58 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13596521354369069821
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: wub6/7QUx1Bz6qZLxuiZ1Q==
x-oss-server-time: 5
via: cache12.l2fr1[0,0,200-0,H], cache2.l2fr1[1,0], ens-cache3.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 77384
ali-swift-global-savetime: 1752666631
x-cache: HIT TCP_HIT dirn:12:555495567
x-swift-savetime: Wed, 16 Jul 2025 14:28:42 GMT
x-swift-cachetime: 76909
timing-allow-origin: *
eagleid: 2ff6309717527440155247506e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-stable.BVIosvAZ.js
200 OK 413 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-stable.BVIosvAZ.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 413 kB (412578 bytes)
Hash 944a6aa3f57b3bdc56ecacb609cec86b
1ad74dc96b531538d5fb999b0d6f16de94c6b159
8d53a2129b275d7da45760b674f6f8ae1fb388fe86859b6db4bee4b0071382b4
GET /assets/vendors/vendor-stable.BVIosvAZ.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/index.DzkESG6a.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 7043
date: Thu, 17 Jul 2025 07:22:44 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:36 GMT
etag: W/"6877a4cc-64ba2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Gm53xdxt2ysjQ1zR1G4qmjZzfNNaMVZj7Y8AzrFgol5j8sZZsJvrTQ==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_dz_1.avif?manualVersion=1&version=v6.2.95
200 OK 3.0 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_dz_1.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash e5db367392767675839524cde8e7dcda
e97983146524f3279c337c721e31cf56e1b7ca17
ff09067ae6c396daf90119f3cd597fcfd355493d22fc3202af682f1063baa98e
GET /siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_dz_1.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 3019
set-cookie: acw_tc=2ff6309717527440109008043e1f954e0077049ce57ac4bf5cfbf21683;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440109008043e1f954e0077049ce57ac4bf5cfbf21683;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F304E2EF85F189270
vary: Origin
accept-ranges: bytes
etag: "E5DB367392767675839524CDE8E7DCDA"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1691347070242699491
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: 5ds2c5J2dnWDlSTN6Ofc2g==
x-oss-server-time: 6
via: cache14.l2fr1[0,0,200-0,H], cache19.l2fr1[1,0], ens-cache4.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:408505922
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440109008043e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_douji_1.avif?manualVersion=1&version=v6.2.95
200 OK 1.8 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_douji_1.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 8044df90bf507d53aecf10f77d73044f
3b7ab847a57f462684087ea44b54bae0fa75120f
1f837b34be944818d6f73625fb4580f4f7cb1e33c9b9f26c435997cdf57877eb
GET /siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_douji_1.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1825
set-cookie: acw_tc=2ff6309717527440110478288ef3b1e4d3a0c6ca8cb01fd07c09f23a72;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440110478288ef3b1e4d3a0c6ca8cb01fd07c09f23a72;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:03 GMT
x-oss-request-id: 6878A7A7DE6693A18B24531D
vary: Origin
accept-ranges: bytes
etag: "8044DF90BF507D53AECF10F77D73044F"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10368695116963475275
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: gETfkL9QfVOuzxD3fXMETw==
x-oss-server-time: 5
via: cache39.l2fr1[0,0,200-0,H], cache9.l2fr1[1,0], ens-cache6.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6308
ali-swift-global-savetime: 1752737703
x-cache: HIT TCP_HIT dirn:12:124199644
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601138
timing-allow-origin: *
eagleid: 2ff6309717527440110478288e
X-Firefox-Spdy: h2
GET fsfw3f.ax88cc.org/ipacdn.txt
200 OK 2 B URL GET fsfw3f.ax88cc.org/ipacdn.txt
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88cc.org
FingerprintA0:F8:A2:EF:57:E7:34:97:7B:9A:70:58:EF:FF:E3:85:8A:C6:C9:0E
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /ipacdn.txt HTTP/1.1
Host: fsfw3f.ax88cc.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/plain
content-length: 2
set-cookie: acw_tc=2ff6309a17527440190954837e80dcf003802522b9902e5a6360e2018b;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309a17527440190954837e80dcf003802522b9902e5a6360e2018b;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 29 May 2025 15:36:17 GMT
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
via: cache5.l2fr1[0,154,200-0,H], cache22.l2fr1[156,0], ens-cache12.nl3[0,0,200-0,H], ens-cache6.nl3[1,0]
age: 4211042
ali-swift-global-savetime: 1748532977
x-cache: HIT TCP_HIT dirn:11:354529359
x-swift-savetime: Thu, 12 Jun 2025 04:50:04 GMT
x-swift-cachetime: 314189173
timing-allow-origin: *
eagleid: 2ff6309a17527440190954837e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_WithdrawSubChunk.BK2D6LrE.js
200 OK 26 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_WithdrawSubChunk.BK2D6LrE.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (26372)
Hash 191e398c5901e3dd66458f30c016f0f2
119383df2c6922e32562409909ed7841d8d33914
dfe1b19a7d32fbce69831ce865c9f51daa6f7876ae3946bf0ee6ab31f7aed541
GET /assets/themes/2_WithdrawSubChunk.BK2D6LrE.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/3_WithdrawSubDialogsChunk.BGXI5TdT.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4311
date: Thu, 17 Jul 2025 08:08:28 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-673f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FDHQJ-w9bWQJHsafzXKcXkoaCiGufWmG3zxDjK3zCqyJ2xYe77EcZA==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_rm_1.avif?manualVersion=1&version=v6.2.95
200 OK 1.6 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_rm_1.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash a366b847023f63075861a071a1b1344c
eacac4b5edbfcfa19ae5ecc66a2f916113e6401c
d26274fa743c32dd7ba036ca81b9efceb71fb219148dee10a2295aca81016093
GET /siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_rm_1.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1643
set-cookie: acw_tc=2ff6309717527440110238246e17b3587b16e1031a5033676e7470161b;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440110238246e17b3587b16e1031a5033676e7470161b;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79FB724A51CFE2D3F23
vary: Origin
accept-ranges: bytes
etag: "A366B847023F63075861A071A1B1344C"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13110171119037869978
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: o2a4RwI/YwdYYaBxobE0TA==
x-oss-server-time: 11
via: cache39.l2fr1[0,0,200-0,H], cache36.l2fr1[1,0], ens-cache3.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:782144183
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440110238246e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_cp_1.avif?manualVersion=1&version=v6.2.95
200 OK 2.5 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_cp_1.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash c6523d0afe5ffcf603bb67ad1167a76c
d791edbc7a75ef3fe2c0448d0500cbfd9d38fe7c
6f73dd618756fa244e62f14647c63a769bac1cc22e425d8563363cdeb83f3a3d
GET /siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_cp_1.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 2515
set-cookie: acw_tc=2ff6309717527440110468286e37b8f24e3943507117e830e8633f3cc9;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440110468286e37b8f24e3943507117e830e8633f3cc9;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:03 GMT
x-oss-request-id: 6878A7A7304E2EF85F18ADA2
vary: Origin
accept-ranges: bytes
etag: "C6523D0AFE5FFCF603BB67AD1167A76C"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9558610672453288934
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: xlI9Cv5f/PYDu2etEWenbA==
x-oss-server-time: 5
via: cache22.l2fr1[0,0,200-0,H], cache12.l2fr1[2,0], ens-cache12.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6308
ali-swift-global-savetime: 1752737703
x-cache: HIT TCP_HIT dirn:11:232747319
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601138
timing-allow-origin: *
eagleid: 2ff6309717527440110468286e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_sw_1.avif?manualVersion=1&version=v6.2.95
200 OK 1.4 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_sw_1.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 2e03e10988891acc9cc637ca119c46a9
638db2bc149f4284a01d7263bee1e1da1a9451de
aaa12a64882b9ae721e85f8e02fd5a8fb3ddcc01094837e49fa20d0295c3616d
GET /siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_sw_1.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1438
set-cookie: acw_tc=2ff6309717527440110498290e378d197b0a4ad68fe3af04d59d06799d;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440110498290e378d197b0a4ad68fe3af04d59d06799d;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:03 GMT
x-oss-request-id: 6878A7A71E3C92E64D263B4C
vary: Origin
accept-ranges: bytes
etag: "2E03E10988891ACC9CC637CA119C46A9"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12509173059260600885
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: LgPhCYiJGsycxjfKEZxGqQ==
x-oss-server-time: 20
via: cache40.l2fr1[0,0,200-0,H], cache11.l2fr1[1,0], ens-cache4.nl3[0,0,200-0,H], ens-cache3.nl3[0,0]
age: 6308
ali-swift-global-savetime: 1752737703
x-cache: HIT TCP_HIT dirn:12:408505899
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601138
timing-allow-origin: *
eagleid: 2ff6309717527440110498290e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/game/hall/listExtLinkV2/currency/VND/language/vi.json
200 OK 128 B URL GET safwee.mailax889.com/hall/api/game/hall/listExtLinkV2/currency/VND/language/vi.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 7fabbceb3619010d87fa49df3af87847
ac33cf46fb6bbd1da6334a56dfc4ea14a1ae175e
2e26f39a76865bf6c6a2adfa86ec339b78ff580d277df6722e4a5fcb51262d00
GET /hall/api/game/hall/listExtLinkV2/currency/VND/language/vi.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 128
set-cookie: acw_tc=2ff6309717527440118031683e3992c8c0f5c31406c281867a45bb8129;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440118031683e3992c8c0f5c31406c281867a45bb8129;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:19:06 GMT
x-oss-request-id: 6878C00ACD3972541A958689
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: f6u86zYZAQ2H+knfOvh4Rw==
x-oss-server-time: 1
via: cache28.l2fr1[0,0,304-0,H], cache12.l2fr1[1,0], ens-cache5.nl3[66,66,200-0,H], ens-cache3.nl3[68,0]
vary: Origin
etag: "7FABBCEB3619010D87FA49DF3AF87847"
last-modified: Thu, 15 May 2025 13:43:24 GMT
x-oss-hash-crc64ecma: 16577750360277831094
age: 65
ali-swift-global-savetime: 1752743946
x-cache: HIT TCP_REFRESH_HIT dirn:11:260559118
x-swift-savetime: Thu, 17 Jul 2025 09:20:11 GMT
x-swift-cachetime: 535
timing-allow-origin: *
eagleid: 2ff6309717527440118031683e
X-Firefox-Spdy: h2
GET fewfg.ax88aa.org/siteadmin/ssocdn.txt
200 OK 2 B URL GET fewfg.ax88aa.org/siteadmin/ssocdn.txt
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subjectfewfg.ax88aa.org
Fingerprint5E:EB:17:19:82:35:3B:0D:97:B9:49:06:45:0A:A7:53:67:11:30:AC
ValidityTue, 20 May 2025 12:29:59 GMT - Mon, 18 Aug 2025 13:29:51 GMT
File type ASCII text, with no line terminators
Hash a60852f204ed8028c1c58808b746d115
b0a98216a32426b9e66a4ac1eb6df2e96e1b495c
843ac01149cced785dfebd0028d3b03ba78e286e1c6f9517ebfcdb609d97af4c
GET /siteadmin/ssocdn.txt HTTP/1.1
Host: fewfg.ax88aa.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 17 Jul 2025 09:20:20 GMT
content-type: text/plain
content-length: 2
x-oss-request-id: 6877A21D13F9D41AA82ADE88
vary: Origin, Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
etag: "A60852F204ED8028C1C58808B746D115"
last-modified: Thu, 15 May 2025 13:40:19 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13902551060587900831
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
content-disposition: attachment
x-oss-force-download: true
content-md5: pghS8gTtgCjBxYgIt0bRFQ==
x-oss-server-time: 2
cf-cache-status: HIT
age: 9075
accept-ranges: bytes
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 9608a9a75c4b56a2-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/active/category/currency/VND/language/vi.json?v=1752739413
200 OK 43 kB URL GET safwee.mailax889.com/hall/api/active/category/currency/VND/language/vi.json?v=1752739413
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (42944), with no line terminators
Hash 3314db744a2b494d127fc92a5fe0d5d3
5b02e73ea9ca69a2ac243cc0a08321dfbca01519
452f63a1f3e748f35afbba49fa79b9c9a501cd89c471c26120f31703d8381294
GET /hall/api/active/category/currency/VND/language/vi.json?v=1752739413 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
set-cookie: acw_tc=2ff6309717527440200276946ee910de9c45df116cdf84ffd358bee869;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440200276946ee910de9c45df116cdf84ffd358bee869;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:20 GMT
x-oss-request-id: 6878C05412A9C80A6EA593D5
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Thu, 17 Jul 2025 08:03:33 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12209064492985207628
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: MxTbdEorSU0Sf8kqX+DV0w==
x-oss-server-time: 1
content-encoding: gzip
via: cache4.l2fr1[227,227,200-0,M], cache34.l2fr1[228,0], ens-cache5.nl3[250,250,200-0,M], ens-cache3.nl3[252,0]
ali-swift-global-savetime: 1752744020
x-cache: MISS TCP_MISS dirn:11:260706566
x-swift-savetime: Thu, 17 Jul 2025 09:20:20 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440200276946e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/active/isShowV2/default.json
200 OK 832 B URL GET safwee.mailax889.com/hall/api/active/isShowV2/default.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (832), with no line terminators
Hash 03ba696a5661d81db77302384bacae79
b4b16f769d020648d43f5c822b386cd61c216cc8
245ed26468d0da5902846a0fc11810b1f2cb81ddec94f6c929bdb5132a337a6d
GET /hall/api/active/isShowV2/default.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 832
set-cookie: acw_tc=2ff6309717527440111778478e91d0a7753f766cffb431f9f3a98d8e2d;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440111778478e91d0a7753f766cffb431f9f3a98d8e2d;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:11 GMT
x-oss-request-id: 6878C04B690BB9DF0F7F5D3C
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: A7ppalZh2B23cwI4S6yueQ==
x-oss-server-time: 2
via: cache12.l2fr1[225,225,304-0,H], cache23.l2fr1[227,0], ens-cache7.nl3[248,248,200-0,H], ens-cache3.nl3[250,0]
vary: Origin
etag: "03BA696A5661D81DB77302384BACAE79"
last-modified: Thu, 17 Jul 2025 08:33:04 GMT
x-oss-hash-crc64ecma: 5111002172426189180
age: 0
ali-swift-global-savetime: 1752744011
x-cache: HIT TCP_REFRESH_HIT dirn:12:150065804
x-swift-savetime: Thu, 17 Jul 2025 09:20:11 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440111778478e
X-Firefox-Spdy: h2
OPTIONS fvsdt.ax88aa.top/hall/api/statistics/domain/pointer
200 OK 0 B URL OPTIONS fvsdt.ax88aa.top/hall/api/statistics/domain/pointer
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /hall/api/statistics/domain/pointer HTTP/1.1
Host: fvsdt.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: appsystem,appversion,auth,browserfingerid,browsertype,clienttimezone,content-type,currency,device,devicebrand,devicemodel,devicetype,domain,language,nonce,operatingsystem,physicaldevicemodel,platformtype,sign,sitecode,timestamp,token,webauthndomain,x-custom-referer,x-data-mode,x-device,x-object-id,x-request-id,x-version
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/octet-stream
content-length: 0
set-cookie: acw_tc=2ff630a017527440167967958e0242823c7a6b6390bd19be55d6c7b571;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440167967958e0242823c7a6b6390bd19be55d6c7b571;path=/;HttpOnly;Max-Age=3600
acw_tc=0a094e3817527440171125206e41e97abe25a5e187dde805e7f1fc6f92c960;path=/;HttpOnly;Max-Age=1800
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:17 GMT
access-control-allow-methods: *
access-control-max-age: 3600
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: appsystem,appversion,auth,browserfingerid,browsertype,clienttimezone,content-type,currency,device,devicebrand,devicemodel,devicetype,domain,language,nonce,operatingsystem,physicaldevicemodel,platformtype,sign,sitecode,timestamp,token,webauthndomain,x-custom-referer,x-data-mode,x-device,x-object-id,x-request-id,x-version
access-control-expose-headers: X-Trace-ID, newjwt, token
via: cache21.l2fr1[470,469,200-0,M], cache21.l2fr1[471,0], ens-cache12.nl3[492,491,200-0,M], ens-cache12.nl3[493,0]
ali-swift-global-savetime: 1752744017
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 2ff630a017527440167967958e
X-Firefox-Spdy: h2
GET 1gzqkd-1889-ppp.oss-accelerate.aliyuncs.com/siteadmin/upload/img/1945441360885649410.png
200 OK 24 kB URL GET 1gzqkd-1889-ppp.oss-accelerate.aliyuncs.com/siteadmin/upload/img/1945441360885649410.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGlobalSign nv-sa
Subject*.oss-eu-central-1.aliyuncs.com
Fingerprint82:9E:ED:B3:E5:61:6D:0D:52:77:3B:4A:1E:DF:68:54:AE:39:DA:01
ValidityTue, 06 May 2025 02:12:11 GMT - Tue, 03 Feb 2026 06:31:07 GMT
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Hash 1c3bc7b572be4943345f4747a841aff9
573feb7d064837e7eab5b071babd10a84c5c18a6
848e730723b5ad9d2e9563cb5c5674aeae0ded1a6b3593bb1c8b27c017e0e3af
GET /siteadmin/upload/img/1945441360885649410.png HTTP/1.1
Host: 1gzqkd-1889-ppp.oss-accelerate.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Thu, 17 Jul 2025 09:20:20 GMT
Content-Type: image/png
Content-Length: 24294
Connection: keep-alive
x-oss-request-id: 6878C054CC39EA4C5E88B2BD
Vary: Origin
Accept-Ranges: bytes
ETag: "1C3BC7B572BE4943345F4747A841AFF9"
Last-Modified: Wed, 16 Jul 2025 11:12:19 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6141454758991048984
x-oss-storage-class: Standard
Cache-Control: max-age=86400
x-oss-ec: 0048-00000110
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: HDvHtXK+SUM0X0dHqEGv+Q==
x-oss-server-time: 2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_WithdrawDialogsChunk.TRHKuK-9.js
200 OK 25 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_WithdrawDialogsChunk.TRHKuK-9.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (24985)
Hash 432d3534d2c4caaa8d81fef3cfbd37f7
88d2f420c7d31be68ebfd12fc271c057ba9959fe
466eaaab7abc2e8f731223a9ad832779127214ace31a51bc7f740f2ab765c877
GET /assets/themes/2_WithdrawDialogsChunk.TRHKuK-9.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/BettingTaskIndex.58K1tkR0.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4312
date: Thu, 17 Jul 2025 08:08:28 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-61e1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 196XnAub6kI-fTRJPU91ijDirMiGdCqvQ36DDF3rXoNCG9jcpKa1YA==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/index.DzkESG6a.js
200 OK 32 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/index.DzkESG6a.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (29215)
Hash 38ba08fa22658b3b115cb896ffe071ab
6e82f33f91f3bc739f2bd8b2cb28831c6cc6ebaf
7bc662066a63d02d5aaea6288d2326ad0d56f6b2675ab28eab49f226155f59e0
GET /assets/themes/index.DzkESG6a.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 7044
date: Thu, 17 Jul 2025 07:22:43 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-7e89"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HTf7Ss6n_dr86GXTiYfOJPcpVuSgmLCIR486bq7xjHLj8WteavrMNw==
GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-.9Fs140A-.css
200 OK 5.0 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-.9Fs140A-.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (4825)
Hash 8395a0b3f19348fc7b95730e067db432
7d158911a42cd013eafe911b7cb84d9d8864c604
04dd101d3a1ffe31667e4783be95a4e21a9095446541c2ec5d913c903497aad0
GET /assets/vendors/vendor-.9Fs140A-.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 2255193
server: AliyunOSS
date: Sat, 21 Jun 2025 06:53:34 GMT
x-oss-request-id: 685656EE7859E43033F816DD
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Tue, 17 Jun 2025 07:17:33 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7487077606416589971
x-oss-storage-class: Standard
x-oss-meta-version: v6.1.62
cache-control: max-age=31622400
content-md5: g5Wgs/GTSPx7lXMOBn20Mg==
x-oss-server-time: 3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 43s2epqPT_guwtY9Fk--O0DlzGecKRaEF0_TMCS2GaLaZZjDnwdBhA==
GET 1gzqkd-1889-ppp.oss-accelerate.aliyuncs.com/cocos/lg/h5icon.ico
200 OK 4.3 kB URL GET 1gzqkd-1889-ppp.oss-accelerate.aliyuncs.com/cocos/lg/h5icon.ico
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGlobalSign nv-sa
Subject*.oss-eu-central-1.aliyuncs.com
Fingerprint82:9E:ED:B3:E5:61:6D:0D:52:77:3B:4A:1E:DF:68:54:AE:39:DA:01
ValidityTue, 06 May 2025 02:12:11 GMT - Tue, 03 Feb 2026 06:31:07 GMT
File type MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Hash 176772dc31c710d7d60ead38b751bbae
48f539ef08f8bfbf3bb34e291e28ada5609997df
16ab162207da88739f40f90f1c44e0c35e606a9f0dc67ff4b10e9f734eeb817f
GET /cocos/lg/h5icon.ico HTTP/1.1
Host: 1gzqkd-1889-ppp.oss-accelerate.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Thu, 17 Jul 2025 09:20:10 GMT
Content-Type: image/x-icon
Content-Length: 4286
Connection: keep-alive
x-oss-request-id: 6878C04A1E3C92E64D79BBD9
Vary: Origin
Accept-Ranges: bytes
ETag: "176772DC31C710D7D60EAD38B751BBAE"
Last-Modified: Wed, 16 Jul 2025 11:08:50 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9361925633882556213
x-oss-storage-class: Standard
Cache-Control: s-maxage=86400,public,max-age=1800
x-oss-ec: 0048-00000110
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: F2dy3DHHENfWDq04t1G7rg==
x-oss-server-time: 2
OPTIONS fvsdt.ax88aa.top/hall/api/agent/promote/binding/reportViewV2
200 OK 0 B URL OPTIONS fvsdt.ax88aa.top/hall/api/agent/promote/binding/reportViewV2
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /hall/api/agent/promote/binding/reportViewV2 HTTP/1.1
Host: fvsdt.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: appsystem,appversion,auth,browserfingerid,browsertype,clienttimezone,content-type,currency,device,devicebrand,devicemodel,devicetype,domain,language,nonce,operatingsystem,physicaldevicemodel,platformtype,sign,sitecode,timestamp,token,webauthndomain,x-custom-referer,x-data-mode,x-device,x-object-id,x-request-id,x-version
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/octet-stream
content-length: 0
set-cookie: acw_tc=2ff630a017527440099384695e404a5cf23d9925dbe4497f30ee159457;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440099384695e404a5cf23d9925dbe4497f30ee159457;path=/;HttpOnly;Max-Age=3600
acw_tc=0a094e3317527440102976944e40da271ca0a0dd3d22d66b0cc806fef2e4ec;path=/;HttpOnly;Max-Age=1800
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:10 GMT
access-control-allow-methods: *
access-control-max-age: 3600
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: appsystem,appversion,auth,browserfingerid,browsertype,clienttimezone,content-type,currency,device,devicebrand,devicemodel,devicetype,domain,language,nonce,operatingsystem,physicaldevicemodel,platformtype,sign,sitecode,timestamp,token,webauthndomain,x-custom-referer,x-data-mode,x-device,x-object-id,x-request-id,x-version
access-control-expose-headers: X-Trace-ID, newjwt, token
via: cache21.l2fr1[466,466,200-0,M], cache21.l2fr1[468,0], ens-cache12.nl3[532,532,200-0,M], ens-cache12.nl3[534,0]
ali-swift-global-savetime: 1752744010
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:10 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 2ff630a017527440099384695e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/libs/webPush@2.2.0/webPushSdk.produce.min.js
200 OK 145 kB URL GET d3mnhu2agy852k.cloudfront.net/libs/webPush@2.2.0/webPushSdk.produce.min.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, ASCII text
Size 145 kB (144931 bytes)
Hash 7274f3b5a9f37a47b8ca60ef3df8d29c
fb786c2c740d368f4aec70b30fd3ee30a8b71334
14b2ecc62e7b6f94e83dc94a65289364057f1571e5367a7f4892168be3c10372
GET /libs/webPush@2.2.0/webPushSdk.produce.min.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 150438
date: Tue, 15 Jul 2025 15:32:58 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Mon, 14 Jul 2025 12:12:56 GMT
etag: W/"6874f448-23623"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8EbygYqTX-q6WCgv-8zu8tpVGlsU-aZgonCKhTlTsOtMGhwxzZMfaA==
GET safwee.mailax889.com/game_pictures/g/CL/13/3/3032/default.avif?web_v=v6.2.95
200 OK 8.4 kB URL GET safwee.mailax889.com/game_pictures/g/CL/13/3/3032/default.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 09f99756eafd4339d61393345ac7f25a
3bb286ca2905b842fd176ac47a39ff6949e53d50
0ec5014ffb5f908ccac7fee61e7d057e2ff3080a770f312a9e5b2f73c5eaa4a3
GET /game_pictures/g/CL/13/3/3032/default.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 8401
set-cookie: acw_tc=2ff6309717527440115421173ef0507c7bb782cd3a77a882798b155aa2;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440115421173ef0507c7bb782cd3a77a882798b155aa2;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F72F0666F55334BC7
vary: Origin
accept-ranges: bytes
etag: "09F99756EAFD4339D61393345AC7F25A"
last-modified: Wed, 16 Jul 2025 11:20:13 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15722286198357141072
x-oss-storage-class: Standard
cache-control: max-age=2678400,stale-while-revalidate=86400,immutable,proxy-revalidate,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: CfmXVur9QznWE5M0WsfyWg==
x-oss-server-time: 5
via: cache18.l2fr1[0,0,200-0,H], cache25.l2fr1[1,0], ens-cache5.nl3[0,0,200-0,H], ens-cache3.nl3[3,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:197184437
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 2674729
timing-allow-origin: *
eagleid: 2ff6309717527440115421173e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1xx_wd.avif?manualVersion=1&version=v6.2.95
200 OK 1.2 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1xx_wd.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash adbb21d29e8ab05d1faa4e9746805a95
7cf63d5be591a934d861a5a8bb3fc7c14e243507
19c600b7292395b10199f27eb249fe029ca2f5d675ea9f3fa2a766f7f74d8d8d
GET /siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1xx_wd.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1235
set-cookie: acw_tc=2ff6309717527440124672880e97ac4bc1296a9d1b8ddb006d001b43ac;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440124672880e97ac4bc1296a9d1b8ddb006d001b43ac;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:05 GMT
x-oss-request-id: 6878A7A9594307992E429789
vary: Origin
accept-ranges: bytes
etag: "ADBB21D29E8AB05D1FAA4E9746805A95"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11597177543994830412
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: rbsh0p6KsF0fqk6XRoBalQ==
x-oss-server-time: 3
via: cache31.l2fr1[0,0,200-0,H], cache12.l2fr1[1,0], ens-cache1.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
age: 6307
ali-swift-global-savetime: 1752737705
x-cache: HIT TCP_HIT dirn:11:567655220
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 601139
timing-allow-origin: *
eagleid: 2ff6309717527440124672880e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/SportChunk.VPyBSHYF.css
200 OK 47 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/SportChunk.VPyBSHYF.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (47247)
Hash 123b22bb280907222d6cf6379fd4a344
028ad18eaa887eebf136c834f7d3f165dfdab091
58d6c61f706732c7688690878aa1117f0944f55d2b0d2d5e96cfcd6fc568abae
GET /assets/themes/SportChunk.VPyBSHYF.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4313
date: Thu, 17 Jul 2025 08:08:24 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-b890"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: k5WuKU5EXOCU9g0RovMhQdtCNQQ5zWCAdQc5q1I7L-UfK3bgK_m_Ow==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_EventOthersChunk.CIb_iIk0.css
200 OK 6.9 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_EventOthersChunk.CIb_iIk0.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (6902)
Hash 2a3e0904996192c1c942a91881b7d9d5
248cc4f40354842368daa5e23a4fb5467d7d2097
287f20160ad81916056d7d33ea1d4f7a98b84dfa8bcaf28bb4e621a7cbc10b0e
GET /assets/themes/2_EventOthersChunk.CIb_iIk0.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4312
date: Thu, 17 Jul 2025 08:08:29 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-1af7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Wc5L1USPl4V3RpKO8Q5QqjQzL1SnK241rCKaen5GHOvjF_t7WZiQaw==
GET safwee.mailax889.com/hall/api/lobby/webapi/forceUpdate/getForceUpdate.json?v=1752722035
200 OK 492 B URL GET safwee.mailax889.com/hall/api/lobby/webapi/forceUpdate/getForceUpdate.json?v=1752722035
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (492), with no line terminators
Hash ab520975968ad1c6e7fae79d455461bb
87eebbd3c76aaa27dc9fcc88fab22b9d25126524
32f83575e903c30e8e0f929571a8b97c053bdc1c837a1a44bec9c999ac30c4e3
GET /hall/api/lobby/webapi/forceUpdate/getForceUpdate.json?v=1752722035 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 492
set-cookie: acw_tc=2ff6309717527440202637470e9e52769f6e063f2aa6b5009ef7cc1ac5;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440202637470e9e52769f6e063f2aa6b5009ef7cc1ac5;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:11:27 GMT
x-oss-request-id: 6878BE3F690BB9DF0F786387
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: q1IJdZaK0cbn+uedRVRhuw==
x-oss-server-time: 1
via: cache2.l2fr1[0,0,304-0,H], cache10.l2fr1[1,0], ens-cache12.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
vary: Origin
etag: "AB520975968AD1C6E7FAE79D455461BB"
last-modified: Thu, 17 Jul 2025 03:13:55 GMT
x-oss-hash-crc64ecma: 14794755008682648377
age: 533
ali-swift-global-savetime: 1752743487
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:11 GMT
x-swift-cachetime: 76
timing-allow-origin: *
eagleid: 2ff6309717527440202637470e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/game/hall/hotListV2/currency/VND/language/vi.json
200 OK 9.4 kB URL GET safwee.mailax889.com/hall/api/game/hall/hotListV2/currency/VND/language/vi.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (9432), with no line terminators
Hash 42fbe737c6ea42498f977c80c5d410b1
4fb55e1c10a19926ad2a11c318300d1ad2ae9f7e
3cdc69416dca89a2fd1ed31fd366c9d7353a50114a6bc65b689eea55b91e54c1
GET /hall/api/game/hall/hotListV2/currency/VND/language/vi.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 6184
set-cookie: acw_tc=2ff6309717527440111858494ed407cfcff8966221979cfa21f727396a;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440111858494ed407cfcff8966221979cfa21f727396a;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:11 GMT
x-oss-request-id: 6878C04B594307992E95DA28
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: QvvnN8bqQkmPl3yAxdQQsQ==
x-oss-server-time: 2
via: cache9.l2fr1[230,230,304-0,H], cache27.l2fr1[231,0], ens-cache6.nl3[297,297,200-0,H], ens-cache3.nl3[299,0]
vary: Accept-Encoding, Origin
last-modified: Thu, 17 Jul 2025 07:46:16 GMT
x-oss-hash-crc64ecma: 10885167480877247975
content-encoding: gzip
age: 0
ali-swift-global-savetime: 1752744011
x-cache: HIT TCP_REFRESH_HIT dirn:12:124203811
x-swift-savetime: Thu, 17 Jul 2025 09:20:11 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440111858494e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/p/1889/CL/hot/19/5/custom_VND.avif?web_v=v6.2.95
200 OK 17 kB URL GET safwee.mailax889.com/game_pictures/p/1889/CL/hot/19/5/custom_VND.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash f0bcff71e788d7ebc9d95d6cd0fef619
86bf3377d585be4bff9fb625c36ccbd87bbeeee9
53f8caed466527eb8e807f3f7d14b1ab91cd608eca36e7182baff7eca00e906f
GET /game_pictures/p/1889/CL/hot/19/5/custom_VND.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 16672
set-cookie: acw_tc=2ff6309717527440114378991e668b0de151ac07d837a68dc467df6f5d;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440114378991e668b0de151ac07d837a68dc467df6f5d;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79FF53B5C78D32D163D
vary: Origin
accept-ranges: bytes
etag: "F0BCFF71E788D7EBC9D95D6CD0FEF619"
last-modified: Wed, 16 Jul 2025 12:41:10 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1226098506255650373
x-oss-storage-class: Standard
cache-control: public,s-maxage=86400,max-age=2592000,stale-while-revalidate=86400,immutable,proxy-revalidate
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: 8Lz/ceeI1+vJ2V1s0P72GQ==
x-oss-server-time: 9
via: cache25.l2fr1[0,0,200-0,H], cache34.l2fr1[1,0], ens-cache5.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:197184575
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 82729
timing-allow-origin: *
eagleid: 2ff6309717527440114378991e
X-Firefox-Spdy: h2
GET accounts.google.com/gsi/style
200 OK 719 B URL GET accounts.google.com/gsi/style
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintAB:9E:66:9E:C9:58:81:70:51:A3:3F:A9:93:14:88:CB:0D:6D:EC:50
ValidityMon, 23 Jun 2025 08:40:23 GMT - Mon, 15 Sep 2025 08:40:22 GMT
File type ASCII text, with very long lines (719), with no line terminators
Hash fa096f673da30f4376837855ae5571e0
fefa42a00b477dfd1c53e15c0629d4425d2a5c88
0e0cd6f15de1d56e6ec8035f3d8b613e4d439e9960db744ddff94a308b77eada
GET /gsi/style HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
expires: Thu, 17 Jul 2025 09:20:12 GMT
date: Thu, 17 Jul 2025 09:20:12 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-BfT2gsZgSN7TsYCWu2aM4Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET d3mnhu2agy852k.cloudfront.net/assets/themes/OutrightIndex.BrseC3ao.js
200 OK 24 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/OutrightIndex.BrseC3ao.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (24317)
Hash 13806efaea2f0f33a31736e1164bae8a
968324fe5df8a06fbdf033728602f3c35e26fa19
644f8691331affd41b026c1a90781dd6375a47cc0b214c71aa55c0a57adbc946
GET /assets/themes/OutrightIndex.BrseC3ao.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/OfficeChannelIndex.DLVJObjn.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4313
date: Thu, 17 Jul 2025 08:08:25 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-5f35"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: T9-QsfkYREVLFdbCjZ7s0GunhzTzghftdlGpO9s3k-IMKsnOyyRy4w==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_WithdrawSubChunk.DM_z_uG7.css
200 OK 15 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_WithdrawSubChunk.DM_z_uG7.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (15247)
Hash b812f9f2ea21a42ae34721ddd40a0c81
7bfcbff733582354c269ce3ba0d9515228f96db9
21d4506fcc38d8d6c3054ab3a80a36e5cd083fcad845b3faea44fd2c93941492
GET /assets/themes/2_WithdrawSubChunk.DM_z_uG7.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4314
date: Thu, 17 Jul 2025 08:08:26 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-3b90"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wbWgU3IlHiGOoQcfkgHTv9-HafdCrq0GpxkmkZ39vc9SLP3k102-rA==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_SettingChunk.DfbIxX5A.css
200 OK 12 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_SettingChunk.DfbIxX5A.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (12103)
Hash 4dc16245a932ae19cb4bbff4456cca12
2c75e0a8a9fa1eeb548374aeacd237df17cce857
5db479830e0419b1d12042b4a018262275c067c11513880667fa9f7cb4706804
GET /assets/themes/2_SettingChunk.DfbIxX5A.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4314
date: Thu, 17 Jul 2025 08:08:26 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-2f48"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bC-8NOPtijGfaA6Iw-K5w-uD4WVUOYxVID2LzXhRPWba0I83xGm-sg==
GET safwee.mailax889.com/game_pictures/p/1889/CL/hot/79/4/custom_VND.avif?web_v=v6.2.95
200 OK 10 kB URL GET safwee.mailax889.com/game_pictures/p/1889/CL/hot/79/4/custom_VND.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash aa1e72f40d8eae3b0e34607ac1ddbbb1
3f0e27760a7947e2545cca046e0bc25d6270e034
9ddadfb238b15f1482ab21734e30762b2a90fb89d537b88df2e7db1608c8c079
GET /game_pictures/p/1889/CL/hot/79/4/custom_VND.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 10402
set-cookie: acw_tc=2ff6309717527440114348982e02c34b225b2bb8fd8663403dc386fc59;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440114348982e02c34b225b2bb8fd8663403dc386fc59;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:56 GMT
x-oss-request-id: 6878A7A0690BB9DF0F2C0862
vary: Origin
accept-ranges: bytes
etag: "AA1E72F40D8EAE3B0E34607AC1DDBBB1"
last-modified: Wed, 16 Jul 2025 12:09:38 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6382968870392740204
x-oss-storage-class: Standard
cache-control: public,s-maxage=86400,max-age=2592000,stale-while-revalidate=86400,immutable,proxy-revalidate
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: qh5y9A2OrjsONGB6wd27sQ==
x-oss-server-time: 3
via: cache14.l2fr1[0,0,200-0,H], cache12.l2fr1[2,0], ens-cache12.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6315
ali-swift-global-savetime: 1752737696
x-cache: HIT TCP_HIT dirn:11:232749573
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 82730
timing-allow-origin: *
eagleid: 2ff6309717527440114348982e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/g/CL/310/3/3100096/default.avif?web_v=v6.2.95
200 OK 11 kB URL GET safwee.mailax889.com/game_pictures/g/CL/310/3/3100096/default.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 713fbc63d51d8b1b2d452de0eb329060
9280954f84fe8856a1181f5199a8228792f1b578
23d3f7920fa5cdd69b992568a469877ff90669ec94e34432966c62b4c189abe6
GET /game_pictures/g/CL/310/3/3100096/default.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 10635
set-cookie: acw_tc=2ff6309717527440115421177ec5932dd395ec810ab63a891a7192bc73;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440115421177ec5932dd395ec810ab63a891a7192bc73;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79FCC39EA4C5E35111C
vary: Origin
accept-ranges: bytes
etag: "713FBC63D51D8B1B2D452DE0EB329060"
last-modified: Wed, 16 Jul 2025 11:20:20 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10591110901094990386
x-oss-storage-class: Standard
cache-control: max-age=2678400,stale-while-revalidate=86400,immutable,proxy-revalidate,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: cT+8Y9UdixstRS3g6zKQYA==
x-oss-server-time: 4
via: cache36.l2fr1[0,0,200-0,H], cache16.l2fr1[1,0], ens-cache2.nl3[0,0,200-0,H], ens-cache3.nl3[3,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:17820892
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 2674729
timing-allow-origin: *
eagleid: 2ff6309717527440115421177e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/0_EntryLoginRegisterChunk.DD3-VJsW.js
200 OK 98 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/0_EntryLoginRegisterChunk.DD3-VJsW.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators
Hash ccc9eb586fa037d9680bc45131504d30
6bb6fdcd48a50d6a7503042ee48138907d5594a8
7b1d6454fdf5889eb9b99c8598cc53ec74083653f33ccc984372bece6230aef0
GET /assets/themes/0_EntryLoginRegisterChunk.DD3-VJsW.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/OfficeChannelIndex.DLVJObjn.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4315
date: Thu, 17 Jul 2025 08:08:19 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-17eea"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: t8Vk4jZAjNXXR2w7v5WWRZZ7bMM7Qjd0bq84nVZxIzbeDkjavd1Bvg==
GET faefs.ax88cc.org/siteadmin/ssocdn.txt
200 OK 2 B URL GET faefs.ax88cc.org/siteadmin/ssocdn.txt
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88cc.org
FingerprintA0:F8:A2:EF:57:E7:34:97:7B:9A:70:58:EF:FF:E3:85:8A:C6:C9:0E
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a60852f204ed8028c1c58808b746d115
b0a98216a32426b9e66a4ac1eb6df2e96e1b495c
843ac01149cced785dfebd0028d3b03ba78e286e1c6f9517ebfcdb609d97af4c
GET /siteadmin/ssocdn.txt HTTP/1.1
Host: faefs.ax88cc.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/plain
content-length: 2
set-cookie: acw_tc=2ff6309a17527440191584946eea230b4291e58a6a5c0f1348c503aa64;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309a17527440191584946eea230b4291e58a6a5c0f1348c503aa64;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 12:59:09 GMT
x-oss-request-id: 6877A21DF53B5C78D320EF1E
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: pghS8gTtgCjBxYgIt0bRFQ==
x-oss-server-time: 1
via: cache36.l2fr1[0,0,304-0,H], cache38.l2fr1[2,0], ens-cache11.nl3[0,0,200-0,H], ens-cache6.nl3[1,0]
vary: Origin
etag: "A60852F204ED8028C1C58808B746D115"
last-modified: Thu, 15 May 2025 13:40:19 GMT
x-oss-hash-crc64ecma: 13902551060587900831
age: 73270
ali-swift-global-savetime: 1752670749
x-cache: HIT TCP_HIT dirn:12:702128136
x-swift-savetime: Wed, 16 Jul 2025 23:39:09 GMT
x-swift-cachetime: 48000
timing-allow-origin: *
eagleid: 2ff6309a17527440191584946e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/netstat/point/get/static/idx/1089047/idxType/1.json
200 OK 192 B URL GET safwee.mailax889.com/hall/api/netstat/point/get/static/idx/1089047/idxType/1.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash b46aee4d4858385277033c559b7c8bea
f3dad1fd881ea7c1982afcd843b182d9f13c922d
cebbd596868a22f34b69b48e64ee34ae9d40830a6ce49976786c3f64b392bfe0
GET /hall/api/netstat/point/get/static/idx/1089047/idxType/1.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 192
set-cookie: acw_tc=2ff6309717527440098816295e3c266c218f507163f399b91a81e7fc8a;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440098816295e3c266c218f507163f399b91a81e7fc8a;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:10 GMT
x-oss-request-id: 6878C04A72F0666F5586A52C
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: tGruTUhYOFJ3AzxVm3yL6g==
x-oss-server-time: 8
via: cache6.l2fr1[226,226,304-0,H], cache34.l2fr1[228,0], ens-cache5.nl3[294,344,200-0,H], ens-cache3.nl3[351,0]
vary: Origin
etag: "B46AEE4D4858385277033C559B7C8BEA"
last-modified: Wed, 16 Jul 2025 12:33:20 GMT
x-oss-hash-crc64ecma: 16842423149327912256
age: 0
ali-swift-global-savetime: 1752744010
x-cache: HIT TCP_REFRESH_HIT dirn:7:82698258
x-swift-savetime: Thu, 17 Jul 2025 09:20:10 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440098816295e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/active/ActiveImg3521294878614367.avif
200 OK 7.5 kB URL GET safwee.mailax889.com/active/ActiveImg3521294878614367.avif
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ISO Media, AVIF Image Sequence
Hash 0ed4cdd131f0aa354b2635ebcd8b2728
352fd2d7d59981c2af58244a23c9b6b899180a18
de1d930f6df87f5ef766a3811ac8d8357e860876c4615f9bd5003f5c2bb46f9f
GET /active/ActiveImg3521294878614367.avif HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 7481
set-cookie: acw_tc=2ff6309717527440199166773e3f33f20d18ac21646116938b442c7acd;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440199166773e3f33f20d18ac21646116938b442c7acd;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 11:50:34 GMT
x-oss-request-id: 6877920ACD3972541AFD00C6
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: DtTN0THwqjVLJjXrzYsnKA==
x-oss-server-time: 2
via: cache36.l2fr1[0,0,304-0,H], cache1.l2fr1[1,0], ens-cache4.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
vary: Origin
etag: "0ED4CDD131F0AA354B2635EBCD8B2728"
last-modified: Sun, 01 Jun 2025 14:58:43 GMT
x-oss-hash-crc64ecma: 9575211524002707160
age: 77385
ali-swift-global-savetime: 1752666634
x-cache: HIT TCP_HIT dirn:11:303439869
x-swift-savetime: Wed, 16 Jul 2025 14:28:43 GMT
x-swift-cachetime: 76911
timing-allow-origin: *
eagleid: 2ff6309717527440199166773e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/libs/frame-storage-proxy@0.0.12/index.min.js
200 OK 5.9 kB URL GET d3mnhu2agy852k.cloudfront.net/libs/frame-storage-proxy@0.0.12/index.min.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (5898)
Hash 1fe1aa6f7f1199fedbab65680c9c81ee
8f66cfa5504dddb5dba8ce1ed4dd9d8afa6ae722
d141ab7c4f2878947b296a97e5abd4d55d26d9b7cf2f6c9058567f444dff265e
GET /libs/frame-storage-proxy@0.0.12/index.min.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript
alt-svc: h3=":443"; ma=86400
age: 1300102
server: AliyunOSS
date: Wed, 02 Jul 2025 08:11:45 GMT
content-md5: H+Gqb38Rmf7bq2VoDJyB7g==
x-oss-server-time: 3
x-oss-request-id: 6864E9C1637FD23838577E5A
content-encoding: br
cache-control: max-age=31622400
last-modified: Wed, 02 Jul 2025 03:57:28 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8995645312990952728
x-oss-storage-class: Standard
x-oss-meta-version: v6.2.33-v6.2.37
etag: W/"1FE1AA6F7F1199FEDBAB65680C9C81EE"
vary: accept-encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JCrMIJAlRU3-6SMaIlDre9q0LhSYUfHFqikQu-epsvN5B-zmF7Wq2w==
GET safwee.mailax889.com/siteadmin/layoutDesign/1945440417497341954.avif
200 OK 28 kB URL GET safwee.mailax889.com/siteadmin/layoutDesign/1945440417497341954.avif
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 337e9eff581c8ea84af9985da18dc040
63b5346120350c915af28d5fcbcb08480f5158b7
5d48821eceb40fcb232dd079d70c75f03723441f84f9973c15e57136b368c0ef
GET /siteadmin/layoutDesign/1945440417497341954.avif HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 28020
set-cookie: acw_tc=2ff6309717527440077072885e4269a6f3af9071eba49997a9131f88e5;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440077072885e4269a6f3af9071eba49997a9131f88e5;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 11:36:04 GMT
x-oss-request-id: 68778EA4DE6693A18BD46EDB
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
vary: Origin
etag: "337E9EFF581C8EA84AF9985DA18DC040"
last-modified: Wed, 16 Jul 2025 11:08:36 GMT
x-oss-hash-crc64ecma: 9467628853443064608
content-md5: M36e/1gcjqhK+ZhdoY3AQA==
x-oss-server-time: 6
via: cache27.l2fr1[0,0,200-0,H], cache29.l2fr1[1,0], ens-cache2.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 78243
ali-swift-global-savetime: 1752665764
x-cache: HIT TCP_HIT dirn:12:412017713
x-swift-savetime: Wed, 16 Jul 2025 11:37:09 GMT
x-swift-cachetime: 86335
timing-allow-origin: *
eagleid: 2ff6309717527440077072885e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/active/tasks/pop_taskThreeDay/currency/VND/language/vi.json?v=1752740104
200 OK 192 B URL GET safwee.mailax889.com/hall/api/active/tasks/pop_taskThreeDay/currency/VND/language/vi.json?v=1752740104
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash cbd2ba2c6aeaf7f605beef2a92552f96
00680aebd3f0893ff76177885ecf2e52debc63f2
3523f2015df15e6edfe1c6fc24780b55fa6ff8f9c5899dcc4a4d60d4688e15e5
GET /hall/api/active/tasks/pop_taskThreeDay/currency/VND/language/vi.json?v=1752740104 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 192
set-cookie: acw_tc=2ff6309717527440234805220e4ff4478d204a7c26fb48d7615a69c783;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440234805220e4ff4478d204a7c26fb48d7615a69c783;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:11:32 GMT
x-oss-request-id: 6878BE44EE8E2834AA95F82C
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
vary: Origin
etag: "CBD2BA2C6AEAF7F605BEEF2A92552F96"
last-modified: Thu, 17 Jul 2025 08:15:04 GMT
x-oss-hash-crc64ecma: 8371201884891638411
content-md5: y9K6LGrq9/YFvu8qklUvlg==
x-oss-server-time: 1
via: cache18.l2fr1[0,0,200-0,H], cache37.l2fr1[0,0], ens-cache2.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 531
ali-swift-global-savetime: 1752743492
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 75
timing-allow-origin: *
eagleid: 2ff6309717527440234805220e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/common/common/comm_icon_gb.avif?manualVersion=1&version=v6.2.95
200 OK 1.3 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/common/common/comm_icon_gb.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash bc1e82b026c2375fbfb26275d37d785c
5f6e2a428261f16c1a6d05806833e6be5644a8fb
fe109f4b4ec0fdfdf95370109d9fb80a0b3d3d8f7fafefa820f4d832c1dbee7c
GET /siteadmin/skin/lobby_asset/common/common/common/comm_icon_gb.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1345
set-cookie: acw_tc=2ff6309717527440199126764ea650b1929bc1bb470e6601d00eb0d82c;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440199126764ea650b1929bc1bb470e6601d00eb0d82c;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:08 GMT
x-oss-request-id: 6878A7AC690BB9DF0F2C32B5
vary: Origin
accept-ranges: bytes
etag: "BC1E82B026C2375FBFB26275D37D785C"
last-modified: Tue, 15 Jul 2025 12:00:12 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8998093129681346611
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: vB6CsCbCN1+/smJ10314XA==
x-oss-server-time: 13
via: cache34.l2fr1[0,0,200-0,H], cache20.l2fr1[1,0], ens-cache6.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6311
ali-swift-global-savetime: 1752737708
x-cache: HIT TCP_HIT dirn:12:124375955
x-swift-savetime: Thu, 17 Jul 2025 08:36:24 GMT
x-swift-cachetime: 601124
timing-allow-origin: *
eagleid: 2ff6309717527440199126764e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/lobby/channel/go/getChannelInfoById/id/1089047/info/channel.json
200 OK 1.3 kB URL GET safwee.mailax889.com/hall/api/lobby/channel/go/getChannelInfoById/id/1089047/info/channel.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (1260), with no line terminators
Hash b04d8d367dad9756e99d23d8c6ef4bf5
7f868164d1d42d112fae89e70fd85f5152a9023d
030883dd54cfacb74c8070f598988af9a34e3ed08cd10a4ae703d08ed46b7dff
GET /hall/api/lobby/channel/go/getChannelInfoById/id/1089047/info/channel.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 1026
set-cookie: acw_tc=2ff6309717527440085374204ed9196ae868981f9be9e43a2c5f87343e;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440085374204ed9196ae868981f9be9e43a2c5f87343e;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:09 GMT
x-oss-request-id: 6878C049048FEFEBFC7C56E8
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: sE2NNn2tl1bpnSPYxu9L9Q==
x-oss-server-time: 2
via: cache26.l2fr1[895,894,304-0,H], cache2.l2fr1[897,0], ens-cache7.nl3[961,967,200-0,H], ens-cache3.nl3[968,0]
vary: Accept-Encoding, Origin
last-modified: Wed, 16 Jul 2025 02:15:37 GMT
x-oss-hash-crc64ecma: 8446310977686912714
content-encoding: gzip
age: 0
ali-swift-global-savetime: 1752744009
x-cache: HIT TCP_REFRESH_HIT dirn:7:139089259
x-swift-savetime: Thu, 17 Jul 2025 09:20:09 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440085374204e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/web/home/icon_dt_pmd.avif?manualVersion=1&version=v6.2.95
200 OK 2.3 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/web/home/icon_dt_pmd.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ISO Media, AVIF Image Sequence
Hash b3e4451cd7b496c753ceda422a05836f
afd53da3eb0c2d27135b4d9178f61d5fe1b575bd
b4ccc240a99ae6fc4fb8440a65fca3558a66479b18976ed0f04d1bcb5976189f
GET /siteadmin/skin/lobby_asset/1-0-common/web/home/icon_dt_pmd.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 2333
set-cookie: acw_tc=2ff6309717527440108147894ea9127b733ad7d83e2c6abdc1199cc637;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440108147894ea9127b733ad7d83e2c6abdc1199cc637;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F72F0666F55334B9C
vary: Origin
accept-ranges: bytes
etag: "B3E4451CD7B496C753CEDA422A05836F"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5692496726147755846
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: s+RFHNe0lsdTztpCKgWDbw==
x-oss-server-time: 4
via: cache31.l2fr1[0,0,200-0,H], cache36.l2fr1[1,0], ens-cache5.nl3[0,0,200-0,H], ens-cache3.nl3[13,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:248858641
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440108147894e
X-Firefox-Spdy: h2
GET fvrea.ax88cc.org/ipacdn.txt
200 OK 2 B URL GET fvrea.ax88cc.org/ipacdn.txt
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88cc.org
FingerprintA0:F8:A2:EF:57:E7:34:97:7B:9A:70:58:EF:FF:E3:85:8A:C6:C9:0E
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /ipacdn.txt HTTP/1.1
Host: fvrea.ax88cc.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/plain
content-length: 2
set-cookie: acw_tc=2ff6309a17527440191995003e5e7e090dbef0b80c3c524fce564a1019;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309a17527440191995003e5e7e090dbef0b80c3c524fce564a1019;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 29 May 2025 18:58:27 GMT
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
via: cache5.l2fr1[0,0,200-0,H], cache39.l2fr1[1,0], ens-cache12.nl3[0,11,200-0,H], ens-cache6.nl3[13,0]
age: 4198912
ali-swift-global-savetime: 1748545107
x-cache: HIT TCP_HIT dirn:9:392807754
x-swift-savetime: Thu, 12 Jun 2025 04:50:03 GMT
x-swift-cachetime: 314201304
timing-allow-origin: *
eagleid: 2ff6309a17527440191995003e
X-Firefox-Spdy: h2
GET oaa88xa.ax88aa.top/siteadmin/ssocdn.txt
200 OK 2 B URL GET oaa88xa.ax88aa.top/siteadmin/ssocdn.txt
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a60852f204ed8028c1c58808b746d115
b0a98216a32426b9e66a4ac1eb6df2e96e1b495c
843ac01149cced785dfebd0028d3b03ba78e286e1c6f9517ebfcdb609d97af4c
GET /siteadmin/ssocdn.txt HTTP/1.1
Host: oaa88xa.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/plain
content-length: 2
set-cookie: acw_tc=2ff630a017527440189773944efc97a68ba9f5e88aaa5d2753ecbc0680;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440189773944efc97a68ba9f5e88aaa5d2753ecbc0680;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 12:59:10 GMT
x-oss-request-id: 6877A21E1E3C92E64D1AC23E
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: pghS8gTtgCjBxYgIt0bRFQ==
x-oss-server-time: 6
via: cache36.l2fr1[0,0,304-0,H], cache16.l2fr1[2,0], ens-cache11.nl3[0,0,200-0,H], ens-cache12.nl3[1,0]
vary: Origin
etag: "A60852F204ED8028C1C58808B746D115"
last-modified: Thu, 15 May 2025 13:40:19 GMT
x-oss-hash-crc64ecma: 13902551060587900831
age: 73268
ali-swift-global-savetime: 1752670750
x-cache: HIT TCP_HIT dirn:11:243015401
x-swift-savetime: Wed, 16 Jul 2025 23:39:10 GMT
x-swift-cachetime: 48000
timing-allow-origin: *
eagleid: 2ff630a017527440189773944e
X-Firefox-Spdy: h2
GET dsfewf.king9a.com/siteadmin/ssocdn.txt
200 OK 2 B URL GET dsfewf.king9a.com/siteadmin/ssocdn.txt
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subjectdsfewf.king9a.com
FingerprintA2:36:A3:29:B4:F0:F9:22:C7:93:45:B0:EF:F0:E7:B0:6E:D3:B0:17
ValidityTue, 20 May 2025 12:14:53 GMT - Mon, 18 Aug 2025 13:14:52 GMT
File type ASCII text, with no line terminators
Hash a60852f204ed8028c1c58808b746d115
b0a98216a32426b9e66a4ac1eb6df2e96e1b495c
843ac01149cced785dfebd0028d3b03ba78e286e1c6f9517ebfcdb609d97af4c
GET /siteadmin/ssocdn.txt HTTP/1.1
Host: dsfewf.king9a.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 17 Jul 2025 09:20:19 GMT
content-type: text/plain
content-length: 2
x-oss-request-id: 68786501DA25D35C4F1F02E0
vary: Origin, Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
etag: "A60852F204ED8028C1C58808B746D115"
last-modified: Thu, 15 May 2025 13:40:19 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13902551060587900831
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
content-disposition: attachment
x-oss-force-download: true
content-md5: pghS8gTtgCjBxYgIt0bRFQ==
x-oss-server-time: 2
cf-cache-status: HIT
age: 9074
accept-ranges: bytes
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 9608a9a7a811b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1xx.avif?manualVersion=1&version=v6.2.95
200 OK 1.3 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1xx.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 86b6c451f07f497385935dca4efbf1f7
e4c276712cb399312755e23d8593fee027083fc5
04714965c0700fc4b11d76c95122433b2a86a534deffdd71b5e3b0269952f006
GET /siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1xx.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1330
set-cookie: acw_tc=2ff6309717527440108147895e4ee479a26c097776f59eca363b1403b8;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440108147895e4ee479a26c097776f59eca363b1403b8;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79FDE6693A18B24366D
vary: Origin
accept-ranges: bytes
etag: "86B6C451F07F497385935DCA4EFBF1F7"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17515970133573215696
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: hrbEUfB/SXOFk13KTvvx9w==
x-oss-server-time: 5
via: cache27.l2fr1[0,0,200-0,H], cache12.l2fr1[2,0], ens-cache4.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:408505951
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440108147895e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_zr_1.avif?manualVersion=1&version=v6.2.95
200 OK 2.1 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_zr_1.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 1e9cb491ec27c2412bbeed57c5817fa7
c66f806eb4deecd5cc6e7a65567372181b1bb67d
97fd80d0c69252435cc9bd0eb1934269105c2300dd72d83fe43ce80946921611
GET /siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_zr_1.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 2113
set-cookie: acw_tc=2ff6309717527440110328257e0c27d91a605ad64eb1fbf393fc81dd9a;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440110328257e0c27d91a605ad64eb1fbf393fc81dd9a;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79FCD3972541A42E022
vary: Origin
accept-ranges: bytes
etag: "1E9CB491EC27C2412BBEED57C5817FA7"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1468228297530659951
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: Hpy0kewnwkErvu1XxYF/pw==
x-oss-server-time: 3
via: cache22.l2fr1[0,0,200-0,H], cache39.l2fr1[2,0], ens-cache10.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:529980912
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440110328257e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/g/CL/315/3/3150103/default.avif?web_v=v6.2.95
200 OK 10 kB URL GET safwee.mailax889.com/game_pictures/g/CL/315/3/3150103/default.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 211de881c3b3b987ccff033ba6f46294
83b51fffe7c88af06635a15c3d202294f88d1fdc
b4c2c70df4eb30ba3b2b2732b8dcdc21d7ea5ea1cd7922fad739a9a3aaadc018
GET /game_pictures/g/CL/315/3/3150103/default.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 10193
set-cookie: acw_tc=2ff6309717527440115471189e7880eb18aac0cc1b51ed3a6dd2ad46a3;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440115471189e7880eb18aac0cc1b51ed3a6dd2ad46a3;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:04 GMT
x-oss-request-id: 6878A7A8304E2EF85F18B193
vary: Origin
accept-ranges: bytes
etag: "211DE881C3B3B987CCFF033BA6F46294"
last-modified: Wed, 16 Jul 2025 11:20:21 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 18032946372656881626
x-oss-storage-class: Standard
cache-control: max-age=2678400,stale-while-revalidate=86400,immutable,proxy-revalidate,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: IR3ogcOzuYfM/wM7pvRilA==
x-oss-server-time: 21
via: cache6.l2fr1[0,0,200-0,H], cache21.l2fr1[1,0], ens-cache11.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
age: 6307
ali-swift-global-savetime: 1752737704
x-cache: HIT TCP_HIT dirn:12:879331682
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 2674738
timing-allow-origin: *
eagleid: 2ff6309717527440115471189e
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2
200 OK 52 kB URL GET fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2
IP
Requested by https://accounts.google.com/gsi/iframe/select?client_id=1064051380568-p21itvinla9ndp0chmi9t7crgiu3u9uv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=FPO4OSm5Fdq7VcdpQ9qtUU_B1gRCOnfZjsfHDXZvBcQ&is_itp=true&channel_id=b961c7782fa8179b36b846d8b2ac912bf6ecad1e94b4268b04f092c3e1b5113b&origin=https%3A%2F%2Fd3mnhu2agy852k.cloudfront.net&oauth2_auth_url=https%3A%2F%2Faccounts.google.com%2Fo%2Foauth2%2Fv2%2Fauth
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
ValidityMon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
File type Web Open Font Format (Version 2), TrueType, length 52212, version 1.0
Hash bbf2ef715b5ac4aa6f847006052e38af
047a89aa049c69af81be14668316f11026c5feba
b342a0861eda53a8b25cea5573516c6ba50a9f3b32257bf160c8a425a307896d
GET /s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 52212
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 18:29:00 GMT
expires: Fri, 10 Jul 2026 18:29:00 GMT
cache-control: public, max-age=31536000
age: 571876
last-modified: Tue, 23 May 2023 16:35:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/libs/monitor/index.js?ver=1.0.3
200 OK 2.7 kB URL GET d3mnhu2agy852k.cloudfront.net/libs/monitor/index.js?ver=1.0.3
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text
Hash 3c46aecfe2c160e241c0b8db24562753
6471977a3c65b4fbdcee16253e91de1a1c23d1ed
c5010f01c37588faa4d5334564f0870b26d9d18b48cdaa021d3df43a9f1f93ef
GET /libs/monitor/index.js?ver=1.0.3 HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 176859
date: Tue, 15 Jul 2025 08:12:28 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Mon, 14 Jul 2025 12:12:56 GMT
etag: W/"6874f448-a7a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7NaNBKpxNOpK8iluIj-WNPVJSYF9JE1lvDp5iMhf-dKgEfX6Lt6l2A==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/vendorChunk.D7TmZIHS.js
200 OK 2.5 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/vendorChunk.D7TmZIHS.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (2453)
Hash 385b3d981ec180895499bf90ddf50d6e
e5792ad0f1df4971a60ae8d62173d3780ce00a87
cb6bc7e686c808edcebf111fdd042eb43fcd55019b65446925718de269be1709
GET /assets/themes/vendorChunk.D7TmZIHS.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/index.DzkESG6a.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 7043
date: Thu, 17 Jul 2025 07:22:44 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-9c7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: J3iyd9lUZ1OMUPl9rPnfTs-uZtzm_padtKW7nAC5YYCD_uIVr9VIsQ==
GET safwee.mailax889.com/hall/api/lobby/config/getAppDownloadInfo.json
200 OK 2.9 kB URL GET safwee.mailax889.com/hall/api/lobby/config/getAppDownloadInfo.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (2880), with no line terminators
Hash 2119ccbbbe57addf1dffc3ed49de17bc
05303a0d1503a4ec7b0aed10b9a34bb5755f4386
e640c129649d9ed8b3fd4277d98008acad0323538b1ba8f984130a24732b71b8
GET /hall/api/lobby/config/getAppDownloadInfo.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 2244
set-cookie: acw_tc=2ff6309717527440098916308e22d3de66f93c2e246a7fdfd70027083e;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440098916308e22d3de66f93c2e246a7fdfd70027083e;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:10 GMT
x-oss-request-id: 6878C04A72F0666F5586A510
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: IRnMu75Xrd8d/8PtSd4XvA==
x-oss-server-time: 2
via: cache28.l2fr1[225,231,304-0,H], cache10.l2fr1[233,0], ens-cache12.nl3[299,300,200-0,H], ens-cache3.nl3[302,0]
vary: Accept-Encoding, Origin
last-modified: Thu, 17 Jul 2025 03:13:55 GMT
x-oss-hash-crc64ecma: 3842435785743106903
content-encoding: gzip
age: 0
ali-swift-global-savetime: 1752744010
x-cache: HIT TCP_REFRESH_HIT dirn:11:244359196
x-swift-savetime: Thu, 17 Jul 2025 09:20:10 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440098916308e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1ss.avif?manualVersion=1&version=v6.2.95
200 OK 1.4 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1ss.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 19838064412bf08e04bcd0173106b90d
274a26b3c365ae5675415a2110a29deaacd0d76a
b80250cb3d8336ddbfaaac9a7304c675c8b055c965f2b18674ea3cd1dd3f8a4b
GET /siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1ss.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1364
set-cookie: acw_tc=2ff6309717527440108147891ec71ca578a4425200db30850d731c59e5;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440108147891ec71ca578a4425200db30850d731c59e5;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F33781BE32A257AF1
vary: Origin
accept-ranges: bytes
etag: "19838064412BF08E04BCD0173106B90D"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6146979735192558215
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: GYOAZEEr8I4EvNAXMQa5DQ==
x-oss-server-time: 3
via: cache32.l2fr1[0,0,200-0,H], cache17.l2fr1[1,0], ens-cache1.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:567645646
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440108147891e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/common/comm_icon_jzgd.svg?manualVersion=1&version=v6.2.95
200 OK 602 B URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/common/comm_icon_jzgd.svg?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 738425e9aecacb59f0fe00de5ce15b11
28a6e082d25dae2bfd467f01608808bcea7c822f
50272b2c641494014e65eb5fd691b8dd0424e8de19ed702e9e2f03332906abf0
GET /siteadmin/skin/lobby_asset/common/web/common/comm_icon_jzgd.svg?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/svg+xml
content-length: 602
set-cookie: acw_tc=2ff6309717527440109838172eb16e5d885b9769d5adddae7b8bdcaffa;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440109838172eb16e5d885b9769d5adddae7b8bdcaffa;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 08:36:06 GMT
x-oss-request-id: 6878B5F5CD3972541A72D350
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
etag: "738425E9AECACB59F0FE00DE5CE15B11"
last-modified: Tue, 15 Jul 2025 12:00:47 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9237853658913805688
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: c4Ql6a7Ky1nw/gDeXOFbEQ==
x-oss-server-time: 1
via: cache6.l2fr1[199,198,200-0,M], cache34.l2fr1[201,0], ens-cache5.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 2644
ali-swift-global-savetime: 1752741366
x-cache: HIT TCP_HIT dirn:12:197182414
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 604800
timing-allow-origin: *
eagleid: 2ff6309717527440109838172e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/active/tasks/pop_taskWeek/currency/VND/language/vi.json?v=1752743710
200 OK 192 B URL GET safwee.mailax889.com/hall/api/active/tasks/pop_taskWeek/currency/VND/language/vi.json?v=1752743710
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a4859bec2d040fcb6890f5ecb7ba0d48
67ceaf6909ab301f12641a65bb8ebc6f91de1932
8e981b477f07b65ee0086a79bcaec946096ed952ccc974847da807880f7793a1
GET /hall/api/active/tasks/pop_taskWeek/currency/VND/language/vi.json?v=1752743710 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 192
set-cookie: acw_tc=2ff6309717527440172422027e6a6638eda5dc68b6de8b9a4c773fa784;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440172422027e6a6638eda5dc68b6de8b9a4c773fa784;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:17 GMT
x-oss-request-id: 6878C051F53B5C78D380BE31
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
etag: "A4859BEC2D040FCB6890F5ECB7BA0D48"
last-modified: Thu, 17 Jul 2025 09:15:09 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13483283914218354031
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: pIWb7C0ED8tokPXst7oNSA==
x-oss-server-time: 1
via: cache10.l2fr1[226,226,200-0,M], cache39.l2fr1[256,0], ens-cache10.nl3[333,333,200-0,M], ens-cache3.nl3[336,0]
ali-swift-global-savetime: 1752744017
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440172422027e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_ItemIndexChunk.C6m1upkl.css
200 OK 18 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_ItemIndexChunk.C6m1upkl.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (18201)
Hash 73d2f273e97ccfb47823204d6b16b76f
17182df3093b6b2c1958786d2a929dd197344ffc
62476b6dbd2d4782e09c608137f9b24f769a09da21f7aea6aa776e58204b7bf6
GET /assets/themes/2_ItemIndexChunk.C6m1upkl.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4316
date: Thu, 17 Jul 2025 08:08:14 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-471a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qn_JMn618wX04INON-lzNqkCOZgGDhgeybIUZbBbud5QyibdJ14Twg==
GET safwee.mailax889.com/siteadmin/upload/img/1945449403833036801.avif
200 OK 44 kB URL GET safwee.mailax889.com/siteadmin/upload/img/1945449403833036801.avif
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash b52de9502a1d79e089bf6d4fd407cf08
c55ae66e17b699c3cd1598bbd55ed4fce0e9b97c
54b0e5df6cc392a0672556ec769221b8efa4dc155b090941c41c7e837480907d
GET /siteadmin/upload/img/1945449403833036801.avif HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 43502
set-cookie: acw_tc=2ff6309717527440155417524e90a03f91573421bd9b1aa75a7e8ef0b2;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440155417524e90a03f91573421bd9b1aa75a7e8ef0b2;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 11:50:33 GMT
x-oss-request-id: 68779208CC39EA4C5EF1139E
vary: Origin
accept-ranges: bytes
etag: "B52DE9502A1D79E089BF6D4FD407CF08"
last-modified: Wed, 16 Jul 2025 11:44:22 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 555281716665138001
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: tS3pUCodeeCJv21P1AfPCA==
x-oss-server-time: 5
via: cache34.l2fr1[0,0,200-0,H], cache1.l2fr1[1,0], ens-cache5.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 77382
ali-swift-global-savetime: 1752666633
x-cache: HIT TCP_HIT dirn:11:409108975
x-swift-savetime: Wed, 16 Jul 2025 14:28:42 GMT
x-swift-cachetime: 76911
timing-allow-origin: *
eagleid: 2ff6309717527440155417524e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/active/tasks/pop_newcomerBenefit/currency/VND/language/vi.json?v=1752740016
200 OK 1.1 kB URL GET safwee.mailax889.com/hall/api/active/tasks/pop_newcomerBenefit/currency/VND/language/vi.json?v=1752740016
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (1132), with no line terminators
Hash 23a338796884125d4c8767efc9a63816
a37636f3e0658def931704f4c4d104daa656a284
39738d53cc66849d55e59fa4a26d75f78ed819d034988dae5acbb285692aa10f
GET /hall/api/active/tasks/pop_newcomerBenefit/currency/VND/language/vi.json?v=1752740016 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 921
set-cookie: acw_tc=2ff6309717527440215472060e2e2692c6d2840e2e750607b60c94beb1;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440215472060e2e2692c6d2840e2e750607b60c94beb1;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:11:29 GMT
x-oss-request-id: 6878BE411E3C92E64D72AEF0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
vary: Accept-Encoding, Origin
last-modified: Thu, 17 Jul 2025 08:13:36 GMT
x-oss-hash-crc64ecma: 17609996472344041334
content-md5: I6M4eWiEEl1Mh2fvyaY4Fg==
x-oss-server-time: 1
content-encoding: gzip
via: cache3.l2fr1[0,0,200-0,H], cache27.l2fr1[1,0], ens-cache6.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 532
ali-swift-global-savetime: 1752743489
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 72
timing-allow-origin: *
eagleid: 2ff6309717527440215472060e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/upload/img/1945448746240532482.avif
200 OK 38 kB URL GET safwee.mailax889.com/siteadmin/upload/img/1945448746240532482.avif
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 6116f02c4c1251862db79f1ab3814bf5
fd30a9c153fb5cac54c05cda3f8a5add56b0db3d
74e03461b9ba0168ff58ce6325e20afa957f877afec24746911f60325e88beb8
GET /siteadmin/upload/img/1945448746240532482.avif HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 37583
set-cookie: acw_tc=2ff6309717527440111688463e785e7c953142f56b8870f3ff83dd28ef;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440111688463e785e7c953142f56b8870f3ff83dd28ef;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 11:50:29 GMT
x-oss-request-id: 6877920533781BE32ADF2DE7
vary: Origin
accept-ranges: bytes
etag: "6116F02C4C1251862DB79F1AB3814BF5"
last-modified: Wed, 16 Jul 2025 11:41:45 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2366412241596797101
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: YRbwLEwSUYYtt58as4FL9Q==
x-oss-server-time: 3
via: cache2.l2fr1[0,0,200-0,H], cache39.l2fr1[1,0], ens-cache1.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 77382
ali-swift-global-savetime: 1752666629
x-cache: HIT TCP_HIT dirn:12:706732916
x-swift-savetime: Wed, 16 Jul 2025 14:28:37 GMT
x-swift-cachetime: 76912
timing-allow-origin: *
eagleid: 2ff6309717527440111688463e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/g/CL/200/3/2000135/default.avif?web_v=v6.2.95
200 OK 9.5 kB URL GET safwee.mailax889.com/game_pictures/g/CL/200/3/2000135/default.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 3924a242a65c83be6627d02db3b10086
f6c463294040b612a35900b9d570319bf3c7a3fb
78cff3588c032dc3ff63f64ed3ca4c94ff5f1f46d7af78268f250686f7aae986
GET /game_pictures/g/CL/200/3/2000135/default.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 9454
set-cookie: acw_tc=2ff6309717527440115421172e4fefe1841225faa98af4e70762c4ff7c;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440115421172e4fefe1841225faa98af4e70762c4ff7c;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F7DAC2C0B334424D7
vary: Origin
accept-ranges: bytes
etag: "3924A242A65C83BE6627D02DB3B10086"
last-modified: Wed, 16 Jul 2025 11:20:14 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3191633406155247263
x-oss-storage-class: Standard
cache-control: max-age=2678400,stale-while-revalidate=86400,immutable,proxy-revalidate,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: OSSiQqZcg75mJ9Ats7EAhg==
x-oss-server-time: 24
via: cache36.l2fr1[0,0,200-0,H], cache31.l2fr1[1,0], ens-cache1.nl3[0,0,200-0,H], ens-cache3.nl3[3,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:567650500
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 2674729
timing-allow-origin: *
eagleid: 2ff6309717527440115421172e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/lobby/site/getSiteInfo/language/vi.json?v=1752664515
200 OK 4.4 kB URL GET safwee.mailax889.com/hall/api/lobby/site/getSiteInfo/language/vi.json?v=1752664515
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (4396), with no line terminators
Hash 3bd00a0ff42f0314b13533c72ee6f579
186fed52482b99e7bbd8c0ab0a3754f9d9cb8ec5
089b190e3d96340fa3986487224a233437bba5278110970c67ae00dfa69aab18
GET /hall/api/lobby/site/getSiteInfo/language/vi.json?v=1752664515 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 3386
set-cookie: acw_tc=2ff6309717527440158157930e41d58e19b5e7eac595b11bd570c0ba90;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440158157930e41d58e19b5e7eac595b11bd570c0ba90;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:19:05 GMT
x-oss-request-id: 6878C009CD3972541A958416
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: O9AKD/QvAxSxNTPHLub1eQ==
x-oss-server-time: 2
via: cache25.l2fr1[0,0,304-0,H], cache29.l2fr1[1,0], ens-cache3.nl3[67,67,200-0,H], ens-cache3.nl3[68,0]
vary: Accept-Encoding, Origin
last-modified: Wed, 16 Jul 2025 11:15:14 GMT
x-oss-hash-crc64ecma: 6011113168986886897
content-encoding: gzip
age: 70
ali-swift-global-savetime: 1752743945
x-cache: HIT TCP_REFRESH_HIT dirn:11:793892872
x-swift-savetime: Thu, 17 Jul 2025 09:20:15 GMT
x-swift-cachetime: 530
timing-allow-origin: *
eagleid: 2ff6309717527440158157930e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/FindUsIndex.BBTOLIjh.js
200 OK 11 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/FindUsIndex.BBTOLIjh.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (10881)
Hash aa66a5059dad7efdd3da0c995090338d
c61b8aa9ca42fb2ee2902f3d348ec0066eea5ca7
1ce485ea8fb64e5da12f461aff9e1e65fc8e778f2589399503b5b594391c3fa4
GET /assets/themes/FindUsIndex.BBTOLIjh.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/commonChunk.CM7oI4Iq.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4315
date: Thu, 17 Jul 2025 08:08:24 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-2ab3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -3fbDhExkVe8FZzo2ri-KkmW1ngIS_yXNgiQoWnSy_NA1duZNSHVQQ==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_WithdrawDialogsChunk.BUdo6fP0.css
200 OK 9.5 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_WithdrawDialogsChunk.BUdo6fP0.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (9486)
Hash 24599304003cdad561576fc72756cb24
1584170fb49c411f7d22278bf843ba8b6d602816
a157b1d558c1a5496f39cc2acca478abece70faea1695872b3b29997df21a410
GET /assets/themes/2_WithdrawDialogsChunk.BUdo6fP0.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4314
date: Thu, 17 Jul 2025 08:08:26 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-250f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BwPF3B4173JzCIis_y4tDw5FXO7kZYVFnn_wmPRip5M8iEwWgYq1Ew==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_SettingChunk.ckCGKVAX.js
200 OK 35 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_SettingChunk.ckCGKVAX.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (35154)
Hash e576d75abf3e32fc284b6cfcf8827518
424812f65d33e07e2a0401858d669007a0b5a8a2
eb607d331e58bf966e534c92b6199978b35015ebf2013b1bd11b2483df475538
GET /assets/themes/2_SettingChunk.ckCGKVAX.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/BettingTaskIndex.58K1tkR0.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4312
date: Thu, 17 Jul 2025 08:08:28 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-8987"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yXmka6kMmXyDtz5LpOgZ2Dw7tI9UUNlm5xhyXKQRrIKsUvTzJcn_mA==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/1_PromoteChunk.D6RsCHnD.css
200 OK 190 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/1_PromoteChunk.D6RsCHnD.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 190 kB (190296 bytes)
Hash 3a8fca6ea890c4b0ccc0488b15f8c996
37601b14d5e929a7c860d09658d16f9dce2a26eb
c6f26f85485c0d498e640539a9b71f7bd2a0e105bc3d4de30152b946a7f941f3
GET /assets/themes/1_PromoteChunk.D6RsCHnD.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4316
date: Thu, 17 Jul 2025 08:08:14 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-2e758"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KK244e3Pj19ikObSi8IZfLmAL_Tl69upOwxa627zg6wtxCHIi5GSng==
GET safwee.mailax889.com/game_pictures/g/CL/315/2/3150074/default.avif?web_v=v6.2.95
200 OK 9.1 kB URL GET safwee.mailax889.com/game_pictures/g/CL/315/2/3150074/default.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash efbf864b06accdbb7bd7018b770a0032
24e1b3ddd1fd6074ac339ac820ff132bd6af3529
cd283fa88d9d76e3fc365390bcc1d7c7613b122e3f5113ab0254219434861012
GET /game_pictures/g/CL/315/2/3150074/default.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 9087
set-cookie: acw_tc=2ff6309717527440115571208efc177981d84c0cdbb5692e47e7603a23;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440115571208efc177981d84c0cdbb5692e47e7603a23;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:04 GMT
x-oss-request-id: 6878A7A81E3C92E64D263E42
vary: Origin
accept-ranges: bytes
etag: "EFBF864B06ACCDBB7BD7018B770A0032"
last-modified: Wed, 16 Jul 2025 11:20:21 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 14075581118132328233
x-oss-storage-class: Standard
cache-control: max-age=2678400,stale-while-revalidate=86400,immutable,proxy-revalidate,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: 77+GSwaszbt71wGLdwoAMg==
x-oss-server-time: 2
via: cache28.l2fr1[0,0,200-0,H], cache13.l2fr1[2,0], ens-cache1.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6307
ali-swift-global-savetime: 1752737704
x-cache: HIT TCP_HIT dirn:11:567650341
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 2674738
timing-allow-origin: *
eagleid: 2ff6309717527440115571208e
X-Firefox-Spdy: h2
GET fvsdt.ax88aa.top/ipacdn.txt
200 OK 2 B URL GET fvsdt.ax88aa.top/ipacdn.txt
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /ipacdn.txt HTTP/1.1
Host: fvsdt.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/plain
content-length: 2
set-cookie: acw_tc=2ff630a017527440186753536e91e1c5097cf5af2e583c6972ed329c3a;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440186753536e91e1c5097cf5af2e583c6972ed329c3a;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 29 May 2025 18:58:27 GMT
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
via: cache5.l2fr1[0,0,200-0,H], cache38.l2fr1[1,0], ens-cache12.nl3[0,0,200-0,H], ens-cache12.nl3[4,0]
age: 4198911
ali-swift-global-savetime: 1748545107
x-cache: HIT TCP_HIT dirn:11:775817304
x-swift-savetime: Thu, 12 Jun 2025 04:50:03 GMT
x-swift-cachetime: 314201304
timing-allow-origin: *
eagleid: 2ff630a017527440186753536e
X-Firefox-Spdy: h2
GET fwefsad.mailax889.com/ipacdn.txt
200 OK 2 B URL GET fwefsad.mailax889.com/ipacdn.txt
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /ipacdn.txt HTTP/1.1
Host: fwefsad.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/plain
content-length: 2
set-cookie: acw_tc=2ff6309f17527440190508641e73a12623ec7c3744f997ae08a7045e33;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309f17527440190508641e73a12623ec7c3744f997ae08a7045e33;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 29 May 2025 15:36:16 GMT
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
via: cache5.l2fr1[0,0,200-0,H], cache21.l2fr1[1,0], ens-cache12.nl3[0,22,200-0,H], ens-cache11.nl3[25,0]
age: 4211043
ali-swift-global-savetime: 1748532976
x-cache: HIT TCP_HIT dirn:8:392740054
x-swift-savetime: Thu, 12 Jun 2025 04:50:03 GMT
x-swift-cachetime: 314189173
timing-allow-origin: *
eagleid: 2ff6309f17527440190508641e
X-Firefox-Spdy: h2
GET 1gzqkd-1889-ppp.oss-accelerate.aliyuncs.com/siteadmin/upload/img/1945441360885649410.png
200 OK 24 kB URL GET 1gzqkd-1889-ppp.oss-accelerate.aliyuncs.com/siteadmin/upload/img/1945441360885649410.png
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGlobalSign nv-sa
Subject*.oss-eu-central-1.aliyuncs.com
Fingerprint82:9E:ED:B3:E5:61:6D:0D:52:77:3B:4A:1E:DF:68:54:AE:39:DA:01
ValidityTue, 06 May 2025 02:12:11 GMT - Tue, 03 Feb 2026 06:31:07 GMT
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Hash 1c3bc7b572be4943345f4747a841aff9
573feb7d064837e7eab5b071babd10a84c5c18a6
848e730723b5ad9d2e9563cb5c5674aeae0ded1a6b3593bb1c8b27c017e0e3af
GET /siteadmin/upload/img/1945441360885649410.png HTTP/1.1
Host: 1gzqkd-1889-ppp.oss-accelerate.aliyuncs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: AliyunOSS
Date: Thu, 17 Jul 2025 09:20:20 GMT
Content-Type: image/png
Content-Length: 24294
Connection: keep-alive
x-oss-request-id: 6878C054CC39EA4C5E88B23C
Vary: Origin
Accept-Ranges: bytes
ETag: "1C3BC7B572BE4943345F4747A841AFF9"
Last-Modified: Wed, 16 Jul 2025 11:12:19 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6141454758991048984
x-oss-storage-class: Standard
Cache-Control: max-age=86400
x-oss-ec: 0048-00000110
Content-Disposition: attachment
x-oss-force-download: true
Content-MD5: HDvHtXK+SUM0X0dHqEGv+Q==
x-oss-server-time: 30
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95
200 OK 1.4 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash b5f683fefdc8a58fe763263ad8ef274e
7f7b768c9253d77f865303d0d4508d6486b71b8f
040abac16343f572f9e019e1638f70e934db351557fa33fc1e47d82340816e1a
GET /siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/svg+xml
set-cookie: acw_tc=2ff6309717527440207758772e12fef387b74fc717cbda20f826fdece6;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440207758772e12fef387b74fc717cbda20f826fdece6;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 08:37:54 GMT
x-oss-request-id: 6878B66113F9D41AA86A971B
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
etag: W/"B5F683FEFDC8A58FE763263AD8EF274E"
last-modified: Tue, 15 Jul 2025 11:53:27 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12668672709788670394
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: tfaD/v3IpY/nYyY62O8nTg==
x-oss-server-time: 2
via: cache29.l2fr1[0,0,200-0,H], cache12.l2fr1[1,0], ens-cache5.nl3[26,26,200-0,M], ens-cache3.nl3[28,0]
age: 2546
ali-swift-global-savetime: 1752741474
x-cache: MISS TCP_MISS dirn:11:260713471
x-swift-savetime: Thu, 17 Jul 2025 09:20:20 GMT
x-swift-cachetime: 602254
timing-allow-origin: *
eagleid: 2ff6309717527440207758772e
content-encoding: br
X-Firefox-Spdy: h2
OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL OPTIONS play.google.com/log?format=json&hasfast=true&authuser=0
IP
Requested by https://accounts.google.com/gsi/iframe/select?client_id=1064051380568-p21itvinla9ndp0chmi9t7crgiu3u9uv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=FPO4OSm5Fdq7VcdpQ9qtUU_B1gRCOnfZjsfHDXZvBcQ&is_itp=true&channel_id=b961c7782fa8179b36b846d8b2ac912bf6ecad1e94b4268b04f092c3e1b5113b&origin=https%3A%2F%2Fd3mnhu2agy852k.cloudfront.net&oauth2_auth_url=https%3A%2F%2Faccounts.google.com%2Fo%2Foauth2%2Fv2%2Fauth
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintB9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32
ValidityMon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"clearcut-frontend-http-prod-hiqos","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos"}]}
content-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos
access-control-allow-origin: https://accounts.google.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Thu, 17 Jul 2025 09:20:26 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtm.js?id=GTM-NFFNCCV8
200 OK 303 kB URL GET www.googletagmanager.com/gtm.js?id=GTM-NFFNCCV8
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20
ValidityMon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT
File type JavaScript source, ASCII text, with very long lines (5288)
Size 303 kB (302721 bytes)
Hash 6444437677ec70b46d242a59bb9a519d
ab7f2a73aa9a2d78212cc407b572b80f2788eafc
528c6a2a75a7b8264d7c15bf46abc7f4d159fa6e35e83d8acfaf3c363094b6af
GET /gtm.js?id=GTM-NFFNCCV8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 17 Jul 2025 09:20:10 GMT
expires: Thu, 17 Jul 2025 09:20:10 GMT
cache-control: private, max-age=900
last-modified: Thu, 17 Jul 2025 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1319:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1319:0
report-to: {"group":"ascgcycc:1319:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1319:0"}],}
server: Google Tag Manager
content-length: 102178
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/lobby/webapi/optimizationV2/site/config/language/vi.json?v=1752735212
200 OK 21 kB URL GET safwee.mailax889.com/hall/api/lobby/webapi/optimizationV2/site/config/language/vi.json?v=1752735212
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (20864), with no line terminators
Hash de781084a3a6dccf994fc49e2a1d7047
4e118da7eaa198b5acde4e51a131aa5a23d2b22e
08d2432dbe3e052b6cbb420aa7d6870b8c315a9118531b0a905c8bf9e917137c
GET /hall/api/lobby/webapi/optimizationV2/site/config/language/vi.json?v=1752735212 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 14419
set-cookie: acw_tc=2ff6309717527440158607983eb2fa09bfba04e40008d48d900d15111c;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440158607983eb2fa09bfba04e40008d48d900d15111c;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:16 GMT
x-oss-request-id: 6878C050CC39EA4C5E889F5B
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Thu, 17 Jul 2025 06:53:32 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8999617235839944629
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: 3ngQhKOm3M+ZT8SeKh1wRw==
x-oss-server-time: 2
content-encoding: gzip
via: cache21.l2fr1[231,230,200-0,M], cache26.l2fr1[232,0], ens-cache1.nl3[300,299,200-0,M], ens-cache3.nl3[301,0]
ali-swift-global-savetime: 1752744016
x-cache: MISS TCP_MISS dirn:11:579387968
x-swift-savetime: Thu, 17 Jul 2025 09:20:16 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440158607983e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/active/tasks/newcomer_benefit_reward/default.json?v=1752740439
200 OK 1.8 kB URL GET safwee.mailax889.com/hall/api/active/tasks/newcomer_benefit_reward/default.json?v=1752740439
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (1772), with no line terminators
Hash 6a11645c97e501a25b61a9a49daadad9
5b52e5fe7b8895119d602f80b5c60be1e319aebf
7f38affeb80a0ddcbdd5628e3ee771af22b88788a0f2f11db806fc7363ab7f5b
GET /hall/api/active/tasks/newcomer_benefit_reward/default.json?v=1752740439 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 1410
set-cookie: acw_tc=2ff6309717527440202597459ea328d6ff9ceddd16b2ede4bd75bf30b2;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440202597459ea328d6ff9ceddd16b2ede4bd75bf30b2;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:12 GMT
x-oss-request-id: 6878C04CDA25D35C4F8D2F5F
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Thu, 17 Jul 2025 08:20:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7484583437090168893
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: ahFkXJflAaJbYamknara2Q==
x-oss-server-time: 2
content-encoding: gzip
via: cache29.l2fr1[257,257,200-0,M], cache32.l2fr1[258,0], ens-cache11.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 8
ali-swift-global-savetime: 1752744012
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:12 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440202597459e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/upload/img/1945448939538735105.avif
200 OK 48 kB URL GET safwee.mailax889.com/siteadmin/upload/img/1945448939538735105.avif
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 0e7bea242180466015ce3c6582f7068f
89e1dcd430d66992b0adf78eadb58e5bbcbbc1c6
417037c3720c167707e7266a32570adc13c523f1be2c2309e2b1b2f5b594dc2c
GET /siteadmin/upload/img/1945448939538735105.avif HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 47805
set-cookie: acw_tc=2ff6309717527440204087845ec6fbe7442eb66203eb22d681cf599867;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440204087845ec6fbe7442eb66203eb22d681cf599867;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 11:50:35 GMT
x-oss-request-id: 6877920B304E2EF85FD565B9
vary: Origin
accept-ranges: bytes
etag: "0E7BEA242180466015CE3C6582F7068F"
last-modified: Wed, 16 Jul 2025 11:42:32 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5570654370855575190
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: DnvqJCGARmAVzjxlgvcGjw==
x-oss-server-time: 1
via: cache37.l2fr1[0,0,200-0,H], cache5.l2fr1[1,0], ens-cache2.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
age: 77385
ali-swift-global-savetime: 1752666635
x-cache: HIT TCP_HIT dirn:12:531689434
x-swift-savetime: Wed, 16 Jul 2025 14:28:43 GMT
x-swift-cachetime: 76912
timing-allow-origin: *
eagleid: 2ff6309717527440204087845e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/commonChunk.BNEIBhwz.css
200 OK 304 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/commonChunk.BNEIBhwz.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 304 kB (303496 bytes)
Hash 242897d6a3285c7104d3b8d42aea8b6c
7c0793367e53999c990027a95f99a9086c6797c5
c743f9faaee7e4c12289aff0f5e82514a3a9d7fda1581acbdeca8af4a0378cc4
GET /assets/themes/commonChunk.BNEIBhwz.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 7044
date: Thu, 17 Jul 2025 07:22:43 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-4a188"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GLmxDw7XwUZ8nXKolpZI3qH_W3QQjniM14xdR3oFK3Dg4HkXR3F09w==
GET safwee.mailax889.com/hall/api/backstage/system/status/currency/VND/language/vi/osType/4/platformType/5.json?v=1752740851
200 OK 25 kB URL GET safwee.mailax889.com/hall/api/backstage/system/status/currency/VND/language/vi/osType/4/platformType/5.json?v=1752740851
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (25280), with no line terminators
Hash 889135a3232461c0f46f74f132914d1e
0f94c688a9555685d7d580b40ca9b6d0d5bb094f
7602102384c69db8b012463ec907e67adc425d153ad1be534934afb1e94f5905
GET /hall/api/backstage/system/status/currency/VND/language/vi/osType/4/platformType/5.json?v=1752740851 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
set-cookie: acw_tc=2ff6309717527440158367955e4cb43e5397f1c1ea14e602624c7bf113;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440158367955e4cb43e5397f1c1ea14e602624c7bf113;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:16 GMT
x-oss-request-id: 6878C04F048FEFEBFC7C6F60
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Thu, 17 Jul 2025 07:26:16 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2904545241769883705
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: iJE1oyMkYcD0b3TxMpFNHg==
x-oss-server-time: 2
content-encoding: gzip
via: cache34.l2fr1[256,255,200-0,M], cache27.l2fr1[256,0], ens-cache6.nl3[279,279,200-0,M], ens-cache3.nl3[281,0]
ali-swift-global-savetime: 1752744016
x-cache: MISS TCP_MISS dirn:12:135508226
x-swift-savetime: Thu, 17 Jul 2025 09:20:16 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440158367955e
X-Firefox-Spdy: h2
GET sdfer.king9a.com/ipacdn.txt
200 OK 2 B URL GET sdfer.king9a.com/ipacdn.txt
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subjectsdfer.king9a.com
FingerprintA1:B9:EC:A7:7F:F1:65:4D:68:07:34:5B:35:12:16:F6:21:50:5F:50
ValidityTue, 20 May 2025 12:14:12 GMT - Mon, 18 Aug 2025 13:14:04 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /ipacdn.txt HTTP/1.1
Host: sdfer.king9a.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 17 Jul 2025 09:20:19 GMT
content-type: text/plain
content-length: 2
set-cookie: acw_tc=0a0ccab417527440191877748e4857ff9a413e47acb6515b428def59847a98;path=/;HttpOnly;Max-Age=1800
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
cf-cache-status: BYPASS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 9608a9a6cfd3712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
200 OK 125 kB URL GET d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (64343), with no line terminators
Size 125 kB (124983 bytes)
Hash 7d4416eff0dbd8d8074be636e5f40ae8
b287a98a5d060034bc4528ff7b9b06d384b2f5d0
0d6d0bb6795b3ed7f23e61fce292d71bf217bb8443c2544ac1400befc703a72e
GET /?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047 HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
DNT: 1
Connection: keep-alive
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
alt-svc: h3=":443"; ma=86400
age: 12
date: Thu, 17 Jul 2025 09:20:06 GMT
cache-control: s-maxage=600,max-age=0,public
content-encoding: br
set-cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191;path=/;HttpOnly;Max-Age=1800
x-powered-by: Express
web-cache-status: DYNAMIC
etag: W/"1e837-soepil0GADS8RSj/e5sG04Sy9dA"
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kiImLkK4-0pi7iW9w1vUNp1LGF8MhjnxEUfyo0hg_4I91CzBDcBa-w==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/common/comm_icon_fh.svg?manualVersion=1&version=v6.2.95
200 OK 434 B URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/common/comm_icon_fh.svg?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 23d59641962d6a3f83c4496092e45c41
b574f76a0712e92b6582c35cf5ec7d02ffde932d
6cfeed773273abdcdc40f5c8e153214d253c2836fb1f8d3a4be65444f07bd58c
GET /siteadmin/skin/lobby_asset/common/web/common/comm_icon_fh.svg?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/svg+xml
content-length: 434
set-cookie: acw_tc=2ff6309717527440207948828eddf254823eed7f2698d543f1bd30c9d8;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440207948828eddf254823eed7f2698d543f1bd30c9d8;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 08:37:54 GMT
x-oss-request-id: 6878B661048FEFEBFC5A09E5
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
etag: "23D59641962D6A3F83C4496092E45C41"
last-modified: Tue, 15 Jul 2025 12:00:35 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7372257561462768315
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: I9WWQZYtaj+DxElgkuRcQQ==
x-oss-server-time: 2
via: cache27.l2fr1[0,0,200-0,H], cache39.l2fr1[1,0], ens-cache4.nl3[67,67,200-0,M], ens-cache3.nl3[69,0]
age: 2546
ali-swift-global-savetime: 1752741474
x-cache: MISS TCP_MISS dirn:12:420325430
x-swift-savetime: Thu, 17 Jul 2025 09:20:20 GMT
x-swift-cachetime: 602254
timing-allow-origin: *
eagleid: 2ff6309717527440207948828e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/p/1889/L1/310/3/custom_VND.avif?web_v=v6.2.95
200 OK 24 kB URL GET safwee.mailax889.com/game_pictures/p/1889/L1/310/3/custom_VND.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash d978d03f8f7da1fc08912d7fd56ea07d
4128cc4d70066abf215e353c23132fe7149f6ed3
a07ef7d996a82fb74a7b45d973374fdbc12b019b51c0f8f27d33561263f88347
GET /game_pictures/p/1889/L1/310/3/custom_VND.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 24106
set-cookie: acw_tc=2ff6309717527440109748156e13c375459cd709b54e78abc0b08ae9b9;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440109748156e13c375459cd709b54e78abc0b08ae9b9;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F304E2EF85F188FCE
vary: Origin
accept-ranges: bytes
etag: "D978D03F8F7DA1FC08912D7FD56EA07D"
last-modified: Wed, 16 Jul 2025 11:49:48 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9830878566866833898
x-oss-storage-class: Standard
cache-control: public,s-maxage=86400,max-age=2592000,stale-while-revalidate=86400,immutable,proxy-revalidate
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: 2XjQP499ofwIkS1/1W6gfQ==
x-oss-server-time: 6
via: cache4.l2fr1[0,0,200-0,H], cache10.l2fr1[1,0], ens-cache4.nl3[0,1,200-0,H], ens-cache3.nl3[3,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:408505915
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 82730
timing-allow-origin: *
eagleid: 2ff6309717527440109748156e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/game/hall/listPlatformCateLoadV2/currency/VND/language/vi.json
200 OK 39 kB URL GET safwee.mailax889.com/hall/api/game/hall/listPlatformCateLoadV2/currency/VND/language/vi.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (39212), with no line terminators
Hash 8e808d41727bb087628fe86fd0db3d4d
b473bf03e440486be7dcf9d9f9f293173c00e185
4496ad0a29e20f15a8b341d02041cdd84f144dbc22938f091c49c32643aa9104
GET /hall/api/game/hall/listPlatformCateLoadV2/currency/VND/language/vi.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 24454
set-cookie: acw_tc=2ff6309717527440118011678ea70f68ad13a65b0f8f63e71125a87f89;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440118011678ea70f68ad13a65b0f8f63e71125a87f89;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:12 GMT
x-oss-request-id: 6878C04BCC39EA4C5E889069
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: joCNQXJ7sIdij+hv0Ns9TQ==
x-oss-server-time: 1
via: cache5.l2fr1[225,224,304-0,H], cache35.l2fr1[226,0], ens-cache6.nl3[291,291,200-0,H], ens-cache3.nl3[293,0]
vary: Accept-Encoding, Origin
last-modified: Thu, 17 Jul 2025 07:46:16 GMT
x-oss-hash-crc64ecma: 13065407371492981839
content-encoding: gzip
age: 0
ali-swift-global-savetime: 1752744012
x-cache: HIT TCP_REFRESH_HIT dirn:11:264729782
x-swift-savetime: Thu, 17 Jul 2025 09:20:12 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440118011678e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_EventDialogsChunk.CJ2UqryH.js
200 OK 132 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_EventDialogsChunk.CJ2UqryH.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (64554)
Size 132 kB (131730 bytes)
Hash fa982e4f0d82163ee7924717ee6e9e78
5a1dcc90e9dcb94b63f74e6f896c9742fcf38564
4574bb1a5f450ce6f09a1eb261aab3727732f339ddc37290a7b9c92d88628314
GET /assets/themes/2_EventDialogsChunk.CJ2UqryH.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/2_ItemIndexChunk.Di7dRst3.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4312
date: Thu, 17 Jul 2025 08:08:23 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-20292"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VMQxb4eFtuw3DtMWD1QEsrTx9tnutbKQYgVcvuACP3aj4RYvFzZl2A==
GET fvsdt.ax88aa.top/hall/ipCheck?siteCode=1889¤cy=VND&language=vi&platformType=5
200 OK 234 B URL GET fvsdt.ax88aa.top/hall/ipCheck?siteCode=1889¤cy=VND&language=vi&platformType=5
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 6840b5efd73fd25e6ea8f3d0c5a8634b
ce0dadb5f6844110ef2c45b6eed9b445a5d12c4b
6422ccdabb297af7a737f83065fb888e96c6ce66e15996472704fb16db4457df
GET /hall/ipCheck?siteCode=1889¤cy=VND&language=vi&platformType=5 HTTP/1.1
Host: fvsdt.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: vi
Accept-Encoding: gzip, deflate, br
x-object-id: {"uid":"","browserLanguage":"en-US","init":{"device":"","created":1752744008113,"version":1752667351000}}
platformType: 5
devicetype: 3
x-device: 1-5
x-data-mode: plain
x-request-id: 8c3e47ae-8a2f-455b-8b4a-7628a93b18df
device: 8f89dae3-1a57-4f86-bf7d-e6eea88a14de
currency: VND
timestamp: 1752744014
nonce: 8c3e47ae-8a2f-455b-8b4a-7628a93b18df
sign: 2q37AXiBsEEpKEfOwlhb0a7ZapnsP1TH5srR3CqQ2HWrqw9gcy9Z0zknYTym20qB
siteCode: 1889
language: vi
token:
auth: undefined
deviceModel: Firefox v134.0
physicalDeviceModel: unknown
operatingSystem: Windows
deviceBrand: unknown
browserType: Firefox v134.0
appSystem: Windows 10
domain: d3mnhu2agy852k.cloudfront.net
webauthnDomain: d3mnhu2agy852k.cloudfront.net
clienttimezone: 0
x-custom-referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
x-version: 6.2.95
browserfingerid:
appVersion: v6.2.95
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json; charset=utf-8
content-length: 234
set-cookie: acw_tc=2ff630a017527440164407431ef38cb8f8713a712d21fc32c79c24d4bd;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440164407431ef38cb8f8713a712d21fc32c79c24d4bd;path=/;HttpOnly;Max-Age=3600
acw_tc=0a094e3717527440168014096e51abc9b9ffc01095507a16f4977d78fb78d9;path=/;HttpOnly;Max-Age=1800
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:16 GMT
cache-control: no-cache
x-env-go-biz-gateway: 0
x-server-version: 4.0.0
x-trace-id: 0222e979f4fcd303
access-control-allow-methods: *
access-control-max-age: 3600
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: X-Trace-ID, newjwt, token
via: cache2.l2fr1[496,495,200-0,M], cache17.l2fr1[497,0], ens-cache10.nl3[562,561,200-0,M], ens-cache12.nl3[563,0]
ali-swift-global-savetime: 1752744016
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 2ff630a017527440164407431e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/0_EmbeddedChunk.BAFej67l.css
200 OK 1.2 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/0_EmbeddedChunk.BAFej67l.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (1191)
Hash eec745fd1c94de574ed686d744159657
290cd6ae81517c45428c8068acfd849e63fe88ce
25f9ca4dea6f092e28aca021c93a9a7b56048701dd6a4c77f645d102f9a35287
GET /assets/themes/0_EmbeddedChunk.BAFej67l.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4313
date: Thu, 17 Jul 2025 08:08:24 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-4a8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GwI-IpPcQ9vu3kVFkLuMNE1Tv3jPXGHEB_IETZaaROxAve4j1Bw8zw==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/commonChunk.CM7oI4Iq.js
200 OK 1.7 MB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/commonChunk.CM7oI4Iq.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (63089)
Size 1.7 MB (1729912 bytes)
Hash d15abb7dbbf909f01b7fa19a5970a33e
c13ef79f8462e7e3b2fbe291b03d7f1c4ed97e59
ea9a45ecb4ac2640021aa987f1a9276588f36806bdcb350c3a005d7bd7cf40a5
GET /assets/themes/commonChunk.CM7oI4Iq.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/index.DzkESG6a.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 7043
date: Thu, 17 Jul 2025 07:22:44 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-1a6578"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LemymDQznEE_RS7sEVgH-MWntMb81jQJ6tDT1pD08ED2aC4_9bljsw==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1yeb.avif?manualVersion=1&version=v6.2.95
200 OK 1.4 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1yeb.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash cde39b8acfaea0dc5f4ea37bdb162b62
eae3ac4f07b1ec19d6ddfe68a1f3287af78f5f1e
3ec8f738358130937e3a499ac29a0200af11fb185f6d8b7bbc0b8b0b469962bb
GET /siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1yeb.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1445
set-cookie: acw_tc=2ff6309717527440108147896ef02649c38a19f69303d6676e76c08125;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440108147896ef02649c38a19f69303d6676e76c08125;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79FCD3972541A42DFEA
vary: Origin
accept-ranges: bytes
etag: "CDE39B8ACFAEA0DC5F4EA37BDB162B62"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3685760305394669390
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: zeObis+uoNxfTqN72xYrYg==
x-oss-server-time: 3
via: cache38.l2fr1[0,0,200-0,H], cache21.l2fr1[1,0], ens-cache4.nl3[0,0,200-0,H], ens-cache3.nl3[4,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:691470576
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440108147896e
X-Firefox-Spdy: h2
GET sdfaa.ax88aa.org/ipacdn.txt
200 OK 2 B URL GET sdfaa.ax88aa.org/ipacdn.txt
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subjectsdfaa.ax88aa.org
Fingerprint37:07:E6:64:7B:83:71:79:E2:9E:C9:90:6F:31:60:EC:CD:41:9F:48
ValidityTue, 20 May 2025 12:29:04 GMT - Mon, 18 Aug 2025 13:28:58 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /ipacdn.txt HTTP/1.1
Host: sdfaa.ax88aa.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 17 Jul 2025 09:20:19 GMT
content-type: text/plain
content-length: 2
set-cookie: acw_tc=0a0ccaae17527440192235866e4a5d5f5615652c380072f6d6573d069e2a18;path=/;HttpOnly;Max-Age=1800
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
cf-cache-status: BYPASS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 9608a9a7583656c5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/active/tasks/pop_taskWeek/currency/VND/language/vi.json?v=1752743710
200 OK 192 B URL GET safwee.mailax889.com/hall/api/active/tasks/pop_taskWeek/currency/VND/language/vi.json?v=1752743710
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash a4859bec2d040fcb6890f5ecb7ba0d48
67ceaf6909ab301f12641a65bb8ebc6f91de1932
8e981b477f07b65ee0086a79bcaec946096ed952ccc974847da807880f7793a1
GET /hall/api/active/tasks/pop_taskWeek/currency/VND/language/vi.json?v=1752743710 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 192
set-cookie: acw_tc=2ff6309717527440229004214e6d98c50138bc1892cd70a37c3dcd601b;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440229004214e6d98c50138bc1892cd70a37c3dcd601b;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:17 GMT
x-oss-request-id: 6878C051F53B5C78D380BE31
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
etag: "A4859BEC2D040FCB6890F5ECB7BA0D48"
last-modified: Thu, 17 Jul 2025 09:15:09 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13483283914218354031
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: pIWb7C0ED8tokPXst7oNSA==
x-oss-server-time: 1
via: cache10.l2fr1[226,226,200-0,M], cache39.l2fr1[256,0], ens-cache10.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 5
ali-swift-global-savetime: 1752744017
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440229004214e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/gohal/staffAllV3/currency/VND/language/vi.json
200 OK 15 kB URL GET safwee.mailax889.com/hall/api/gohal/staffAllV3/currency/VND/language/vi.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (14976), with no line terminators
Hash ef19f9552abde52519812b0c1e8ccd5e
e2e8da2b8e7b43c1be1193dfb36c2e3a7cc40374
18085d3a4c2f4b1d4124738f33439443348bd191e9bc08deeb79d9d8864b84f7
GET /hall/api/gohal/staffAllV3/currency/VND/language/vi.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 11063
set-cookie: acw_tc=2ff6309717527440095995860eb88f9bd99504b1cd66c474fcbdd03179;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440095995860eb88f9bd99504b1cd66c474fcbdd03179;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:09 GMT
x-oss-request-id: 6878C049690BB9DF0F7F576C
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Thu, 17 Jul 2025 09:09:49 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6989579941660650640
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: 7xn5VSq95SUZgSsMHozNXg==
x-oss-server-time: 2
content-encoding: gzip
via: cache40.l2fr1[227,227,200-0,M], cache25.l2fr1[229,0], ens-cache12.nl3[296,296,200-0,M], ens-cache3.nl3[298,0]
ali-swift-global-savetime: 1752744009
x-cache: MISS TCP_REFRESH_MISS dirn:12:585893831
x-swift-savetime: Thu, 17 Jul 2025 09:20:09 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440095995860e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/p/1889/L1/200/3/custom_VND.avif?web_v=v6.2.95
200 OK 26 kB URL GET safwee.mailax889.com/game_pictures/p/1889/L1/200/3/custom_VND.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 57ced00e83b79d4f22ca92b247155298
4be2c90375c3f8de3f26e8201b312ee11f3c2454
53fb2d1ebb84967ffe9a6241f812c0e850ae3ab5c0fee8e2f59fae0d19c57a01
GET /game_pictures/p/1889/L1/200/3/custom_VND.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 25663
set-cookie: acw_tc=2ff6309717527440109008048e29f2ff892c19344756ff495fff7afcaf;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440109008048e29f2ff892c19344756ff495fff7afcaf;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F13F9D41AA83990AA
vary: Origin
accept-ranges: bytes
etag: "57CED00E83B79D4F22CA92B247155298"
last-modified: Wed, 16 Jul 2025 11:49:13 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13325352973344934144
x-oss-storage-class: Standard
cache-control: public,s-maxage=86400,max-age=2592000,stale-while-revalidate=86400,immutable,proxy-revalidate
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: V87QDoO3nU8iypKyRxVSmA==
x-oss-server-time: 4
via: cache2.l2fr1[0,0,200-0,H], cache18.l2fr1[1,0], ens-cache3.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:384758513
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 82730
timing-allow-origin: *
eagleid: 2ff6309717527440109008048e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/common/comm_icon_jzgd.svg?manualVersion=1&version=v6.2.95
200 OK 602 B URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/common/comm_icon_jzgd.svg?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 738425e9aecacb59f0fe00de5ce15b11
28a6e082d25dae2bfd467f01608808bcea7c822f
50272b2c641494014e65eb5fd691b8dd0424e8de19ed702e9e2f03332906abf0
GET /siteadmin/skin/lobby_asset/common/web/common/comm_icon_jzgd.svg?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/svg+xml
content-length: 602
set-cookie: acw_tc=2ff6309717527440116221300e3ac2b283e276827c99fe45c596089e25;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440116221300e3ac2b283e276827c99fe45c596089e25;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 08:36:06 GMT
x-oss-request-id: 6878B5F5CD3972541A72D350
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
etag: "738425E9AECACB59F0FE00DE5CE15B11"
last-modified: Tue, 15 Jul 2025 12:00:47 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9237853658913805688
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: c4Ql6a7Ky1nw/gDeXOFbEQ==
x-oss-server-time: 1
via: cache6.l2fr1[199,198,200-0,M], cache34.l2fr1[201,0], ens-cache5.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 2645
ali-swift-global-savetime: 1752741366
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 604800
timing-allow-origin: *
eagleid: 2ff6309717527440116221300e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/message/list/all/currency/VND/language/vi/page/1/type/99.json?v=1752741637
200 OK 7.4 kB URL GET safwee.mailax889.com/hall/api/message/list/all/currency/VND/language/vi/page/1/type/99.json?v=1752741637
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (7448), with no line terminators
Hash 04a0dc560452f6ae19173560ef2f59b1
6a2492336c8083919ef1cdce99718dd3add2b9bf
2ce02359c49acd96310fbc5712d1dc9602293dc255e3d96d3f6b733af73e1e11
GET /hall/api/message/list/all/currency/VND/language/vi/page/1/type/99.json?v=1752741637 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 5613
set-cookie: acw_tc=2ff6309717527440200316954e6a669c67daf56a83e8cae056f2cd49be;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440200316954e6a669c67daf56a83e8cae056f2cd49be;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:20 GMT
x-oss-request-id: 6878C05472F0666F5586CE01
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Thu, 17 Jul 2025 08:40:37 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8246521642031880304
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: BKDcVgRS9q4ZFzVg7y9ZsQ==
x-oss-server-time: 2
content-encoding: gzip
via: cache25.l2fr1[226,226,200-0,M], cache26.l2fr1[227,0], ens-cache1.nl3[248,248,200-0,M], ens-cache3.nl3[250,0]
ali-swift-global-savetime: 1752744020
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:20 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440200316954e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/polyfills.a154J3j-.js
200 OK 107 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/polyfills.a154J3j-.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Size 107 kB (107353 bytes)
Hash 5066b8ee7590a9a0f893977804650041
a9336921fa866ce88828c389bea414bea024433c
1e9455842e96ee9bc2ab7030906bb25140f67d241b6b50c5ae34032c57593949
GET /assets/themes/polyfills.a154J3j-.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 7043
date: Thu, 17 Jul 2025 07:22:43 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-1a359"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zDwZbmPn3-5sBqTJXiFTjLqV2d3b4e6krT2SV811BJFVK85udVwz1w==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_qkl_1.avif?manualVersion=1&version=v6.2.95
200 OK 2.0 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_qkl_1.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 4b1543ba162d0655077a82c1dd631ce1
9c5aa7a5a6537bef992d51d189f615c5939924d8
d428f3e0f5d9dc7de6a79f129139f33e6170b6d47bb07bf484b1464ec78a0697
GET /siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_qkl_1.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1996
set-cookie: acw_tc=2ff6309717527440110408275e5dfb3a044312e09435f05d909e673566;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440110408275e5dfb3a044312e09435f05d909e673566;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79FDE6693A18B243667
vary: Origin
accept-ranges: bytes
etag: "4B1543BA162D0655077A82C1DD631CE1"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4693715331554725992
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: SxVDuhYtBlUHeoLB3WMc4Q==
x-oss-server-time: 15
via: cache16.l2fr1[0,0,200-0,H], cache24.l2fr1[1,0], ens-cache7.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:166560194
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440110408275e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/finance/maxChargeRate/currency/VND/osType/4.json
200 OK 108 B URL GET safwee.mailax889.com/hall/api/finance/maxChargeRate/currency/VND/osType/4.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 3830f8ee5a99887fe4ae99b30c2c4462
ab3caf65291f1d5553c676e0fbfdbeca315a678d
4390dc3c9cd3f241134413d9444e5d2446525a25b0492b3ffd1de0283c00e13b
GET /hall/api/finance/maxChargeRate/currency/VND/osType/4.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 108
set-cookie: acw_tc=2ff6309717527440111798482e40cb55244a4ca95e22c4c7a70783ad58;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440111798482e40cb55244a4ca95e22c4c7a70783ad58;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:11 GMT
x-oss-request-id: 6878C04BCD3972541A96640D
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: ODD47lqZiH/krpmzDCxEYg==
x-oss-server-time: 6
via: cache28.l2fr1[227,227,304-0,H], cache15.l2fr1[229,0], ens-cache1.nl3[295,295,200-0,H], ens-cache3.nl3[297,0]
vary: Origin
etag: "3830F8EE5A99887FE4AE99B30C2C4462"
last-modified: Thu, 17 Jul 2025 06:57:10 GMT
x-oss-hash-crc64ecma: 11640624727051636017
age: 0
ali-swift-global-savetime: 1752744011
x-cache: HIT TCP_REFRESH_HIT dirn:12:549875737
x-swift-savetime: Thu, 17 Jul 2025 09:20:11 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440111798482e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/g/CL/200/3/2000074/default.avif?web_v=v6.2.95
200 OK 10 kB URL GET safwee.mailax889.com/game_pictures/g/CL/200/3/2000074/default.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash dfd35fa34dcafb187b3a0f87e39ff82a
ce21feaf39754481fec37b095e14717dc79723bc
f5bb285126b560384118b0b31d42eed55a342f88735c2021a41241e6698e3ed7
GET /game_pictures/g/CL/200/3/2000074/default.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 10459
set-cookie: acw_tc=2ff6309717527440114471013ea016bd0fb470145282a6c204c92994a1;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440114471013ea016bd0fb470145282a6c204c92994a1;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F690BB9DF0F2C05C4
vary: Origin
accept-ranges: bytes
etag: "DFD35FA34DCAFB187B3A0F87E39FF82A"
last-modified: Wed, 16 Jul 2025 11:20:14 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16117374488963003041
x-oss-storage-class: Standard
cache-control: max-age=2678400,stale-while-revalidate=86400,immutable,proxy-revalidate,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: 39Nfo03K+xh7Og+H45/4Kg==
x-oss-server-time: 3
via: cache31.l2fr1[0,0,200-0,H], cache36.l2fr1[0,0], ens-cache3.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:782146163
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 2674729
timing-allow-origin: *
eagleid: 2ff6309717527440114471013e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_EventOthersChunk.D2ywLl0w.js
200 OK 18 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_EventOthersChunk.D2ywLl0w.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (18036)
Hash f4fbc6b6af5c2993a25b1816f11ca6ec
570fb31d813702703f9e40371275a066a80284a8
43d703aa735488db551bb11ee90299b6a7f44e57cf74fea96066888328a66b8c
GET /assets/themes/2_EventOthersChunk.D2ywLl0w.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/commonChunk.CM7oI4Iq.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4312
date: Thu, 17 Jul 2025 08:08:29 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-46ad"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: e5Gm5yLuV66OdDo3ey04jSnA08D337s5ISo-Hhd1-OBQSlMPQrfqHQ==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/BettingTaskIndex.TJt5bjeU.css
200 OK 31 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/BettingTaskIndex.TJt5bjeU.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (31393)
Hash 97441473fa7f0b746e17bec5823eaf59
aa9144e13a532b21006a612c182b66f2e3d9f217
a24588dc4a8218085fe37e936890548a4464f9b6eaac4b04cb01d4b99cb3375e
GET /assets/themes/BettingTaskIndex.TJt5bjeU.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4314
date: Thu, 17 Jul 2025 08:08:26 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-7aa2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NhdVp0Fv3l0XFFrPWboUQuvR6emukwPuE4RwCbQ9690jYbBUNGUMHQ==
GET d3mnhu2agy852k.cloudfront.net/assets/themes/1_RechargeDialogsChunk.BpKTcPiN.js
200 OK 55 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/1_RechargeDialogsChunk.BpKTcPiN.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (54543)
Hash b256bbb041f1b490ad31d71aa2befda9
a7a2fcf4d278370374bb9af473b266819d46196d
e42d0a51fedebcaed94483b11d2d15d980f0c78e26193d3c1368ae1bff7aa9db
GET /assets/themes/1_RechargeDialogsChunk.BpKTcPiN.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/2_NoticePageChunk.DQnMHxLK.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4314
date: Thu, 17 Jul 2025 08:08:21 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-d585"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xaUpSF3qnNTX157izZrDiLc7AS711Bj25P3Ponr5Tso-pPqKIWcHww==
GET safwee.mailax889.com/hall/api/active/tasks/pop_taskDay/currency/VND/language/vi.json?v=1752743789
200 OK 920 B URL GET safwee.mailax889.com/hall/api/active/tasks/pop_taskDay/currency/VND/language/vi.json?v=1752743789
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (920), with no line terminators
Hash b802d14f6bf7471627d7b2aee5663bc4
a162fdd07088ea0911616f428126483dc8bf3059
64520fa92ad756f1f8fbe20f8960ebeb7e9f20a7662eb4df8028889bace2b749
GET /hall/api/active/tasks/pop_taskDay/currency/VND/language/vi.json?v=1752743789 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 920
set-cookie: acw_tc=2ff6309717527440172422025e0d3eee086566d95c6f7f5ca233d261b4;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440172422025e0d3eee086566d95c6f7f5ca233d261b4;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:17 GMT
x-oss-request-id: 6878C0517DAC2C0B33979F19
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
etag: "B802D14F6BF7471627D7B2AEE5663BC4"
last-modified: Thu, 17 Jul 2025 09:16:29 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 14350589325804072098
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: uALRT2v3RxYn17Ku5WY7xA==
x-oss-server-time: 6
via: cache10.l2fr1[233,232,200-0,M], cache23.l2fr1[234,0], ens-cache11.nl3[255,255,200-0,M], ens-cache3.nl3[257,0]
ali-swift-global-savetime: 1752744017
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440172422025e
X-Firefox-Spdy: h2
GET dsvtghf.olympus9a.com/ipacdn.txt
200 OK 2 B URL GET dsvtghf.olympus9a.com/ipacdn.txt
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subjectdsvtghf.olympus9a.com
FingerprintEF:5B:76:F2:EE:B7:C4:62:6F:9C:26:09:3A:9A:6F:EF:57:26:4F:65
ValidityThu, 29 May 2025 17:44:47 GMT - Wed, 27 Aug 2025 18:44:46 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /ipacdn.txt HTTP/1.1
Host: dsvtghf.olympus9a.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 17 Jul 2025 09:20:19 GMT
content-type: text/plain
content-length: 2
set-cookie: acw_tc=0a0ccab817527440190093608e438fcc2a005dae53a30c9a03e6fdbd92d010;path=/;HttpOnly;Max-Age=1800
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
cf-cache-status: BYPASS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 9608a9a59bc90b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-bignumber.DgvdTaxG.js
200 OK 38 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-bignumber.DgvdTaxG.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (37687)
Hash cf6cc8b47eb50671e3faf9e284c18cf1
2df880eda5510fbfb49382cdb9ac6e011cc379d1
de7a38cafe7973e66a6f66965c8975aac1e2085cd22f5a790c6bd57f614fe754
GET /assets/vendors/vendor-bignumber.DgvdTaxG.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/index.DzkESG6a.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 7043
date: Thu, 17 Jul 2025 07:22:44 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:36 GMT
etag: W/"6877a4cc-9371"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mCCNvmaIL6vUQ8pLc-L-gbU2VmBTU7EDVNQ42fcMcQ8cWghRpaMSkw==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_by_1.avif?manualVersion=1&version=v6.2.95
200 OK 2.1 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_by_1.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 798b36e4d178572233f953ac0528b8ce
7303077407e6cddc5e1eb08c9f39c9b5aeb07eda
e7598920cb06042cf8d9696cc6b1f2c4ac57d08246f5334930cd05ff0082476d
GET /siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_by_1.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 2053
set-cookie: acw_tc=2ff6309717527440110378265ef31e115c8604c53666b12493cfb91c37;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440110378265ef31e115c8604c53666b12493cfb91c37;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F1E3C92E64D261F26
vary: Origin
accept-ranges: bytes
etag: "798B36E4D178572233F953AC0528B8CE"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8531949581686361262
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: eYs25NF4VyIz+VOsBSi4zg==
x-oss-server-time: 4
via: cache24.l2fr1[0,0,200-0,H], cache36.l2fr1[1,0], ens-cache7.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:150064073
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440110378265e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/g/CL/200/3/2000065/default.avif?web_v=v6.2.95
200 OK 6.4 kB URL GET safwee.mailax889.com/game_pictures/g/CL/200/3/2000065/default.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash ed56d15df1b0ab356a8ff46ad030b7a6
11ba9f3f4948cf921f0570349694db3322acb5ba
047a11005e1113ae91bb635b6544d28de42532269c8e55098f189cc9fbf7a831
GET /game_pictures/g/CL/200/3/2000065/default.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 6397
set-cookie: acw_tc=2ff6309717527440115421179e328b49e5b2b717b8a7f14f4052fec41d;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440115421179e328b49e5b2b717b8a7f14f4052fec41d;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:04 GMT
x-oss-request-id: 6878A7A840D002799320EC93
vary: Origin
accept-ranges: bytes
etag: "ED56D15DF1B0AB356A8FF46AD030B7A6"
last-modified: Wed, 16 Jul 2025 11:20:14 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10387255050546445712
x-oss-storage-class: Standard
cache-control: max-age=2678400,stale-while-revalidate=86400,immutable,proxy-revalidate,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: 7VbRXfGwqzVqj/Rq0DC3pg==
x-oss-server-time: 18
via: cache4.l2fr1[0,0,200-0,H], cache25.l2fr1[1,0], ens-cache10.nl3[0,0,200-0,H], ens-cache3.nl3[5,0]
age: 6307
ali-swift-global-savetime: 1752737704
x-cache: HIT TCP_HIT dirn:11:529982821
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 2674738
timing-allow-origin: *
eagleid: 2ff6309717527440115421179e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/game/hall/gameVersion/currency/VND.json
200 OK 216 B URL GET safwee.mailax889.com/hall/api/game/hall/gameVersion/currency/VND.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash aaa3ebf41eaf2e9d70f109fbe60016ea
d6d9be19a75bc44cbeb661ba40466bad2215622f
e023dc02981e08ca2ccdfd92260f6a031a409c14b9f9b78497659469d9a6c768
GET /hall/api/game/hall/gameVersion/currency/VND.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 216
set-cookie: acw_tc=2ff6309717527440118011675e80e69ea6c22aa6cfd66888b38cdc5b64;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440118011675e80e69ea6c22aa6cfd66888b38cdc5b64;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:12 GMT
x-oss-request-id: 6878C04C7DAC2C0B33978BB7
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: qqPr9B6vLp1w8Qn75gAW6g==
x-oss-server-time: 2
via: cache21.l2fr1[256,276,304-0,H], cache25.l2fr1[278,0], ens-cache6.nl3[343,353,200-0,H], ens-cache3.nl3[356,0]
vary: Origin
etag: "AAA3EBF41EAF2E9D70F109FBE60016EA"
last-modified: Wed, 16 Jul 2025 12:49:53 GMT
x-oss-hash-crc64ecma: 9484968840846837420
age: 0
ali-swift-global-savetime: 1752744012
x-cache: HIT TCP_REFRESH_HIT dirn:1:287408594
x-swift-savetime: Thu, 17 Jul 2025 09:20:12 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440118011675e
X-Firefox-Spdy: h2
POST fvsdt.ax88aa.top/hall/api/agent/promote/pointer/domain
200 OK 50 B URL POST fvsdt.ax88aa.top/hall/api/agent/promote/pointer/domain
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 8ff13fc6aaee7486690c3d8797ea0950
7cb2b94d48c09eb6774ee4e048e71e46ec2f86e3
e14958887a71f1276e8bb189b09f7d0bcfefdf75b074cffb205f2a08b0ef2e5e
POST /hall/api/agent/promote/pointer/domain HTTP/1.1
Host: fvsdt.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: vi
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-object-id: {"uid":"","browserLanguage":"en-US","init":{"device":"","created":1752744008113,"version":1752667351000}}
platformType: 5
devicetype: 3
x-device: 1-5
x-data-mode: plain
x-request-id: b2afeae2-3a4e-483a-bbdd-a7afd8482d86
device: 8f89dae3-1a57-4f86-bf7d-e6eea88a14de
currency: VND
timestamp: 1752744015
nonce: b2afeae2-3a4e-483a-bbdd-a7afd8482d86
sign: 1nTPwa0UjxeIw9Jbpdnk5zlwEI3bxz1WBDuMSoGLhKzzprKZcb0G3yTDf5tirfum
siteCode: 1889
language: vi
token: b2e3d672-9d88-47a7-81b4-9d7ffc62054f
auth: undefined
deviceModel: Firefox v134.0
physicalDeviceModel: unknown
operatingSystem: Windows
deviceBrand: unknown
browserType: Firefox v134.0
appSystem: Windows 10
domain: d3mnhu2agy852k.cloudfront.net
webauthnDomain: d3mnhu2agy852k.cloudfront.net
clienttimezone: 0
x-custom-referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
x-version: 6.2.95
browserfingerid:
appVersion: v6.2.95
Content-Length: 82
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json; charset=utf-8
content-length: 50
set-cookie: acw_tc=2ff630a017527440174171665ee0d9378988c85bddd51bfabc352dd2f7;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440174171665ee0d9378988c85bddd51bfabc352dd2f7;path=/;HttpOnly;Max-Age=3600
acw_tc=0a094e3317527440177787311e40c7bf0349616a87521ebe0518253c8fffd8;path=/;HttpOnly;Max-Age=1800
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:17 GMT
api-cache: false
cache-control: no-cache
x-env-go-biz-agent-server: 0
x-env-go-biz-gateway: 0
x-server-version: 4.0.0
x-trace-id: 02094011fdff1edb
access-control-allow-methods: *
access-control-max-age: 3600
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: X-Trace-ID, newjwt, token
via: cache13.l2fr1[475,475,200-0,M], cache13.l2fr1[477,0], ens-cache12.nl3[542,542,200-0,M], ens-cache12.nl3[543,0]
ali-swift-global-savetime: 1752744017
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 2ff630a017527440174171665e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/BettingTaskIndex.58K1tkR0.js
200 OK 38 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/BettingTaskIndex.58K1tkR0.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (36931)
Hash 7e0434c6b54802086fec06e0b1fbb147
c44bdd975bf7e9f18b2d181f7da791bc74a66b77
12fbbadd8cc9f10495803f799dde64a675efa300955fc695d38c5d45bb302b3c
GET /assets/themes/BettingTaskIndex.58K1tkR0.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/commonChunk.CM7oI4Iq.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4313
date: Thu, 17 Jul 2025 08:08:27 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-9253"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KnputFp8DcUr-vh7d-V_NkD4bJABGeleBq8CuCVun6Vh4nDYv4HliQ==
GET fscgge.mahjong9a.com/siteadmin/ssocdn.txt
200 OK 2 B URL GET fscgge.mahjong9a.com/siteadmin/ssocdn.txt
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subjectfscgge.mahjong9a.com
FingerprintE4:67:98:0D:6A:8D:F4:62:4C:A0:21:3F:1E:BD:B5:15:C6:41:4B:38
ValidityTue, 20 May 2025 12:23:58 GMT - Mon, 18 Aug 2025 13:23:52 GMT
File type ASCII text, with no line terminators
Hash a60852f204ed8028c1c58808b746d115
b0a98216a32426b9e66a4ac1eb6df2e96e1b495c
843ac01149cced785dfebd0028d3b03ba78e286e1c6f9517ebfcdb609d97af4c
GET /siteadmin/ssocdn.txt HTTP/1.1
Host: fscgge.mahjong9a.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 17 Jul 2025 09:20:19 GMT
content-type: text/plain
content-length: 2
x-oss-request-id: 6877A21D40D002799313392B
vary: Origin, Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
etag: "A60852F204ED8028C1C58808B746D115"
last-modified: Thu, 15 May 2025 13:40:19 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13902551060587900831
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
content-disposition: attachment
x-oss-force-download: true
content-md5: pghS8gTtgCjBxYgIt0bRFQ==
x-oss-server-time: 2
cf-cache-status: HIT
age: 9074
accept-ranges: bytes
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 9608a9a78a005685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/upload/img/1945448671238676481.avif
200 OK 52 kB URL GET safwee.mailax889.com/siteadmin/upload/img/1945448671238676481.avif
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 07b59fec78d9c7883e514edb2d5aa7e9
2931553e6be8cbe0f902b0234ec398f301c339c6
a03a2c5ef9d9ee86f94efc23fed4b8861d82545f4a52b000e2d986db53a348c1
GET /siteadmin/upload/img/1945448671238676481.avif HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 52126
set-cookie: acw_tc=2ff6309717527440111668459ef0c661101dac61204f6f3cebe50e570c;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440111668459ef0c661101dac61204f6f3cebe50e570c;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 11:50:29 GMT
x-oss-request-id: 6877920413F9D41AA8F3F5A1
vary: Origin
accept-ranges: bytes
etag: "07B59FEC78D9C7883E514EDB2D5AA7E9"
last-modified: Wed, 16 Jul 2025 11:41:28 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15575829204947408688
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: B7Wf7HjZx4g+UU7bLVqn6Q==
x-oss-server-time: 6
via: cache9.l2fr1[0,0,200-0,H], cache16.l2fr1[1,0], ens-cache6.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 77382
ali-swift-global-savetime: 1752666629
x-cache: HIT TCP_HIT dirn:12:248398320
x-swift-savetime: Wed, 16 Jul 2025 14:28:37 GMT
x-swift-cachetime: 76912
timing-allow-origin: *
eagleid: 2ff6309717527440111668459e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/common/home/img_game_tj_1.avif?manualVersion=1&version=v6.2.95
200 OK 1.1 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/common/home/img_game_tj_1.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 2b8da882cecc4a4a352dea6c09071cda
10f7bd49bc745c66ba29623ed547d9b7e7b04cd4
cda7757bd7bc1ab969124fda7c8fed94e6c468015642e18d1c974b5d0afc3c3a
GET /siteadmin/skin/lobby_asset/common/common/home/img_game_tj_1.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1103
set-cookie: acw_tc=2ff6309717527440114408997e46d913f1381fee95b682790e3c395a9b;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440114408997e46d913f1381fee95b682790e3c395a9b;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79FCC39EA4C5E35118A
vary: Origin
accept-ranges: bytes
etag: "2B8DA882CECC4A4A352DEA6C09071CDA"
last-modified: Tue, 15 Jul 2025 11:52:45 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6763429224260697277
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: K42ogs7MSko1LepsCQcc2g==
x-oss-server-time: 4
via: cache9.l2fr1[0,0,200-0,H], cache22.l2fr1[1,0], ens-cache11.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:420182073
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 601129
timing-allow-origin: *
eagleid: 2ff6309717527440114408997e
X-Firefox-Spdy: h2
GET x03k89o0jg.wgbos.com/agespeed.txt?1752744011607
200 OK 2 B URL GET x03k89o0jg.wgbos.com/agespeed.txt?1752744011607
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerLet's Encrypt
Subjectx03k89o0jg.wgbos.com
Fingerprint63:F5:84:FD:EF:98:DB:26:31:51:02:A6:A8:51:6D:3E:80:2F:76:DB
ValidityWed, 16 Jul 2025 08:25:29 GMT - Tue, 14 Oct 2025 08:25:28 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /agespeed.txt?1752744011607 HTTP/1.1
Host: x03k89o0jg.wgbos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 17 Jul 2025 09:20:12 GMT
content-type: text/plain
content-length: 2
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
cf-cache-status: BYPASS
accept-ranges: bytes
set-cookie: acw_tc=0a094e3917527440123507233e51990a7d0759302d3ebb25a557130a879ee4;path=/;HttpOnly;Max-Age=1800
__cf_bm=EmFG.QpcoqBXUK9sbBKY_uPJjdkvRUoVDUb5jNC2snM-1752744012-1.0.1.1-nXxKxmWF7Y7fCrVXgVQrYn8E8Qao95gT5u8c0JXWaEgPBuLEhZWSO9sgrf0nSx7Sl1pawdrnrs4C_cmBAySGGmQaj1lqAdKpPE0Sz.sNvlw; path=/; expires=Thu, 17-Jul-25 09:50:12 GMT; domain=.x03k89o0jg.wgbos.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 9608a97a1bbf5685-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
OPTIONS fvsdt.ax88aa.top/hall/api/agent/promote/pointer/domain
200 OK 0 B URL OPTIONS fvsdt.ax88aa.top/hall/api/agent/promote/pointer/domain
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /hall/api/agent/promote/pointer/domain HTTP/1.1
Host: fvsdt.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: appsystem,appversion,auth,browserfingerid,browsertype,clienttimezone,content-type,currency,device,devicebrand,devicemodel,devicetype,domain,language,nonce,operatingsystem,physicaldevicemodel,platformtype,sign,sitecode,timestamp,token,webauthndomain,x-custom-referer,x-data-mode,x-device,x-object-id,x-request-id,x-version
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/octet-stream
content-length: 0
set-cookie: acw_tc=2ff630a017527440167887944ecb060a01a38b84002d117fd296257932;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440167887944ecb060a01a38b84002d117fd296257932;path=/;HttpOnly;Max-Age=3600
acw_tc=0a0ccab017527440171561311e59560a985339ccd14c8873e2e5db8cb034fc;path=/;HttpOnly;Max-Age=1800
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:17 GMT
access-control-allow-methods: *
access-control-max-age: 3600
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: appsystem,appversion,auth,browserfingerid,browsertype,clienttimezone,content-type,currency,device,devicebrand,devicemodel,devicetype,domain,language,nonce,operatingsystem,physicaldevicemodel,platformtype,sign,sitecode,timestamp,token,webauthndomain,x-custom-referer,x-data-mode,x-device,x-object-id,x-request-id,x-version
access-control-expose-headers: X-Trace-ID, newjwt, token
via: cache17.l2fr1[481,481,200-0,M], cache17.l2fr1[483,0], ens-cache12.nl3[549,549,200-0,M], ens-cache12.nl3[550,0]
ali-swift-global-savetime: 1752744017
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 2ff630a017527440167887944e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/lobby/webapi/forceUpdate/getForceUpdate.json?v=1752722035
200 OK 492 B URL GET safwee.mailax889.com/hall/api/lobby/webapi/forceUpdate/getForceUpdate.json?v=1752722035
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (492), with no line terminators
Hash ab520975968ad1c6e7fae79d455461bb
87eebbd3c76aaa27dc9fcc88fab22b9d25126524
32f83575e903c30e8e0f929571a8b97c053bdc1c837a1a44bec9c999ac30c4e3
GET /hall/api/lobby/webapi/forceUpdate/getForceUpdate.json?v=1752722035 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 492
set-cookie: acw_tc=2ff6309717527440118231748e67cae461f344c6757e7511561b1121f7;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440118231748e67cae461f344c6757e7511561b1121f7;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:11:27 GMT
x-oss-request-id: 6878BE3F690BB9DF0F786387
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: q1IJdZaK0cbn+uedRVRhuw==
x-oss-server-time: 1
via: cache2.l2fr1[0,0,304-0,H], cache10.l2fr1[1,0], ens-cache12.nl3[22,32,200-0,H], ens-cache3.nl3[34,0]
vary: Origin
etag: "AB520975968AD1C6E7FAE79D455461BB"
last-modified: Thu, 17 Jul 2025 03:13:55 GMT
x-oss-hash-crc64ecma: 14794755008682648377
age: 524
ali-swift-global-savetime: 1752743487
x-cache: HIT TCP_REFRESH_HIT dirn:10:389954572
x-swift-savetime: Thu, 17 Jul 2025 09:20:11 GMT
x-swift-cachetime: 76
timing-allow-origin: *
eagleid: 2ff6309717527440118231748e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/FindUsIndex.pYalZxWF.css
200 OK 6.0 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/FindUsIndex.pYalZxWF.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (6009)
Hash 251666cf0af7465198073ce83f0ae56f
823eab814d195324de2e226741ce0b38df288eee
5115d33516856420363ee4268a3662b3be9b1f570f5d71e9b880c58e2b61b595
GET /assets/themes/FindUsIndex.pYalZxWF.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4315
date: Thu, 17 Jul 2025 08:08:24 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-177a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ta8x9fmkL6vUw1C8ia9B-ywB5d1rAOOg_4PznRH7KfI28RjXW8AKqw==
GET safwee.mailax889.com/cocos/config_data.json?timestamp=1752744008433
200 OK 6.4 kB URL GET safwee.mailax889.com/cocos/config_data.json?timestamp=1752744008433
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (6360), with no line terminators
Hash b83789a74b4a12aadb8723d48defe987
6011f9b9d5b3a56329bb2c2ae2df7747af1b87e3
90cc93144226236418beb459346f4c7be3bf1db12d866eaf34d01ed97a3d99ed
GET /cocos/config_data.json?timestamp=1752744008433 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 4795
set-cookie: acw_tc=2ff6309717527440085124179e1dc5359556d7bf4fbe9d78fe139d6231;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440085124179e1dc5359556d7bf4fbe9d78fe139d6231;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:09 GMT
x-oss-request-id: 6878C04972F0666F5586A29D
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Wed, 09 Jul 2025 02:21:00 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6583428893555858613
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: uDeJp0tKEqrbhyPUje/phw==
x-oss-server-time: 7
content-encoding: gzip
via: cache14.l2fr1[964,964,200-0,M], cache3.l2fr1[965,0], ens-cache7.nl3[1030,1030,200-0,M], ens-cache3.nl3[1032,0]
ali-swift-global-savetime: 1752744009
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:09 GMT
x-swift-cachetime: 86400
timing-allow-origin: *
eagleid: 2ff6309717527440085124179e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/message/list/all/currency/VND/language/vi/page/1/type/99.json
200 OK 7.4 kB URL GET safwee.mailax889.com/hall/api/message/list/all/currency/VND/language/vi/page/1/type/99.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (7448), with no line terminators
Hash 04a0dc560452f6ae19173560ef2f59b1
6a2492336c8083919ef1cdce99718dd3add2b9bf
2ce02359c49acd96310fbc5712d1dc9602293dc255e3d96d3f6b733af73e1e11
GET /hall/api/message/list/all/currency/VND/language/vi/page/1/type/99.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 5613
set-cookie: acw_tc=2ff6309717527440111938506e677f06cf39f1c3d8f155cc26de567fbb;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440111938506e677f06cf39f1c3d8f155cc26de567fbb;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:11 GMT
x-oss-request-id: 6878C04BB724A51CFE805D9D
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Thu, 17 Jul 2025 08:40:37 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8246521642031880304
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: BKDcVgRS9q4ZFzVg7y9ZsQ==
x-oss-server-time: 1
content-encoding: gzip
via: cache17.l2fr1[256,256,200-0,M], cache13.l2fr1[258,0], ens-cache7.nl3[323,323,200-0,M], ens-cache3.nl3[349,0]
ali-swift-global-savetime: 1752744011
x-cache: MISS TCP_REFRESH_MISS dirn:12:150066014
x-swift-savetime: Thu, 17 Jul 2025 09:20:11 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440111938506e
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2
200 OK 52 kB URL GET fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2
IP
Requested by https://accounts.google.com/gsi/iframe/select?client_id=1064051380568-p21itvinla9ndp0chmi9t7crgiu3u9uv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=FPO4OSm5Fdq7VcdpQ9qtUU_B1gRCOnfZjsfHDXZvBcQ&is_itp=true&channel_id=b961c7782fa8179b36b846d8b2ac912bf6ecad1e94b4268b04f092c3e1b5113b&origin=https%3A%2F%2Fd3mnhu2agy852k.cloudfront.net&oauth2_auth_url=https%3A%2F%2Faccounts.google.com%2Fo%2Foauth2%2Fv2%2Fauth
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint9A:5E:6D:44:D8:FB:03:E5:9A:13:6D:FF:53:DA:1C:8C:EA:3A:A7:AA
ValidityMon, 23 Jun 2025 08:41:27 GMT - Mon, 15 Sep 2025 08:41:26 GMT
File type Web Open Font Format (Version 2), TrueType, length 52212, version 1.0
Hash bbf2ef715b5ac4aa6f847006052e38af
047a89aa049c69af81be14668316f11026c5feba
b342a0861eda53a8b25cea5573516c6ba50a9f3b32257bf160c8a425a307896d
GET /s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://accounts.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 52212
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 18:29:00 GMT
expires: Fri, 10 Jul 2026 18:29:00 GMT
cache-control: public, max-age=31536000
age: 571875
last-modified: Tue, 23 May 2023 16:35:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95
200 OK 1.4 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash b5f683fefdc8a58fe763263ad8ef274e
7f7b768c9253d77f865303d0d4508d6486b71b8f
040abac16343f572f9e019e1638f70e934db351557fa33fc1e47d82340816e1a
GET /siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/svg+xml
set-cookie: acw_tc=2ff6309717527440207918820e2087bfd51b10460911fda7ab6ab34183;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440207918820e2087bfd51b10460911fda7ab6ab34183;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 08:37:54 GMT
x-oss-request-id: 6878B66113F9D41AA86A971B
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
etag: W/"B5F683FEFDC8A58FE763263AD8EF274E"
last-modified: Tue, 15 Jul 2025 11:53:27 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12668672709788670394
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: tfaD/v3IpY/nYyY62O8nTg==
x-oss-server-time: 2
via: cache29.l2fr1[0,0,200-0,H], cache12.l2fr1[1,0], ens-cache5.nl3[26,11,200-0,C], ens-cache3.nl3[13,0]
age: 2546
ali-swift-global-savetime: 1752741474
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:20 GMT
x-swift-cachetime: 602254
timing-allow-origin: *
eagleid: 2ff6309717527440207918820e
content-encoding: br
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/OfficeChannelIndex.CUYRIAzl.css
200 OK 25 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/OfficeChannelIndex.CUYRIAzl.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (25160)
Hash 9428ad508ee9ed8ed30e988ada0c52db
c15d8668252471790c55c8038d0fbe67fbc5c987
f8301d5e54924cff8ae8dfe3432d65228214c6a4130f2f172a15c0234e926358
GET /assets/themes/OfficeChannelIndex.CUYRIAzl.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4316
date: Thu, 17 Jul 2025 08:08:14 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-6249"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xf5iWDijBj9lwdTRINOR3ltoCo8LDwMWicn0cIlg8Oc7B_HrbxBb6w==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1vip.avif?manualVersion=1&version=v6.2.95
200 OK 1.3 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1vip.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 13efb459ce3b15faa9467186b40b255d
fee02e665a601c1c6f9aeed1cfe1ac6e8afb698d
c205ba01958085cfac88578ca1c3af13a4c45db8fe40015af4818b2b23465925
GET /siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1vip.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1291
set-cookie: acw_tc=2ff6309717527440108147897ed6bb004da9a00395ed2b8e21af5ef32b;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440108147897ed6bb004da9a00395ed2b8e21af5ef32b;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79FDE6693A18B243679
vary: Origin
accept-ranges: bytes
etag: "13EFB459CE3B15FAA9467186B40B255D"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9356035569394869188
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: E++0Wc47FfqpRnGGtAslXQ==
x-oss-server-time: 4
via: cache28.l2fr1[0,0,200-0,H], cache22.l2fr1[1,0], ens-cache6.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:124199854
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440108147897e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/1_PromotionChunk.DfyhiDjM.js
200 OK 190 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/1_PromotionChunk.DfyhiDjM.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size 190 kB (189723 bytes)
Hash 7d1550c8b87aa3e716fa7073d41ede75
864859367d48016d83e1d0a0694d6774e6c0d13e
42a5d3966df9b6d3aa396a7bab379e9c99036477c82a2dd2c8f13d0fb1a480a7
GET /assets/themes/1_PromotionChunk.DfyhiDjM.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/FixedInBottomNoClose.B7W1uct6.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4313
date: Thu, 17 Jul 2025 08:08:21 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-2e51b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PHVNODgB7od80QfPf8GtDCzJFM9l5r0n9B1QWzFBVYMfb_uNSXfCsA==
GET safwee.mailax889.com/hall/api/lobby/footerConfigV2/getInfo/language/vi.json
200 OK 1.5 kB URL GET safwee.mailax889.com/hall/api/lobby/footerConfigV2/getInfo/language/vi.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (1516), with no line terminators
Hash d11ef3ba3a3d834d0a7595b450517284
59ea19d198f778f541fc43700c34d12adad55405
d56346ecf013357d32cc62ae104f01c47f57bdc5079bc03f08f572b7ae772d39
GET /hall/api/lobby/footerConfigV2/getInfo/language/vi.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 1218
set-cookie: acw_tc=2ff6309717527440112028517eef0bb19ecea2285b3c7c7d559853c770;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440112028517eef0bb19ecea2285b3c7c7d559853c770;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:11 GMT
x-oss-request-id: 6878C04BCD3972541A96641E
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: 0R7zujo9g00KdZW0UFFyhA==
x-oss-server-time: 1
via: cache4.l2fr1[227,226,304-0,H], cache37.l2fr1[229,0], ens-cache2.nl3[302,318,200-0,H], ens-cache3.nl3[339,0]
vary: Accept-Encoding, Origin
last-modified: Wed, 16 Jul 2025 15:27:44 GMT
x-oss-hash-crc64ecma: 9493973156543134698
content-encoding: gzip
age: 0
ali-swift-global-savetime: 1752744011
x-cache: HIT TCP_REFRESH_HIT dirn:2:1341411485
x-swift-savetime: Thu, 17 Jul 2025 09:20:11 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440112028517e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/upload/img/1945441336534265857.png
200 OK 24 kB URL GET safwee.mailax889.com/siteadmin/upload/img/1945441336534265857.png
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced
Hash 1c3bc7b572be4943345f4747a841aff9
573feb7d064837e7eab5b071babd10a84c5c18a6
848e730723b5ad9d2e9563cb5c5674aeae0ded1a6b3593bb1c8b27c017e0e3af
GET /siteadmin/upload/img/1945441336534265857.png HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/png
content-length: 24294
set-cookie: acw_tc=2ff6309717527440083403908e840cc0f16afd86f80195035094a3f872;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440083403908e840cc0f16afd86f80195035094a3f872;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 11:36:05 GMT
x-oss-request-id: 68778EA512A9C80A6EFF5DDF
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
vary: Origin
etag: "1C3BC7B572BE4943345F4747A841AFF9"
last-modified: Wed, 16 Jul 2025 11:12:14 GMT
x-oss-hash-crc64ecma: 6141454758991048984
content-md5: HDvHtXK+SUM0X0dHqEGv+Q==
x-oss-server-time: 5
via: cache4.l2fr1[0,0,200-0,H], cache29.l2fr1[1,0], ens-cache2.nl3[0,1,200-0,H], ens-cache3.nl3[3,0]
age: 78243
ali-swift-global-savetime: 1752665765
x-cache: HIT TCP_HIT dirn:12:412366857
x-swift-savetime: Wed, 16 Jul 2025 11:37:39 GMT
x-swift-cachetime: 86306
timing-allow-origin: *
eagleid: 2ff6309717527440083403908e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/1_RechargeDialogsChunk.Ce5l8IeA.css
200 OK 26 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/1_RechargeDialogsChunk.Ce5l8IeA.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (26419)
Hash 9d7b498a247fbd23b66afc0c3e693cfe
f6e8a0a342d9fda1379d658ec57f82b2c0df90f5
9f8d60b75d86ff0325f6c35d1824378ebed702d4991d08b086128700762b1917
GET /assets/themes/1_RechargeDialogsChunk.Ce5l8IeA.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4316
date: Thu, 17 Jul 2025 08:08:14 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-6734"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rH-D8bD7lk7TaHQYVLbiupyxIxkboBHmeZ7w6cu58bOjA3U2S1FpMQ==
GET fgsdt.mailax889.com/ipacdn.txt
200 OK 2 B URL GET fgsdt.mailax889.com/ipacdn.txt
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /ipacdn.txt HTTP/1.1
Host: fgsdt.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/plain
content-length: 2
set-cookie: acw_tc=2ff6309517527440190461916e6d92a95f0d74288d2b96aaf4532fee95;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309517527440190461916e6d92a95f0d74288d2b96aaf4532fee95;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 29 May 2025 18:58:27 GMT
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
via: cache5.l2fr1[0,154,200-0,H], cache24.l2fr1[157,0], ens-cache12.nl3[0,0,200-0,H], ens-cache1.nl3[1,0]
age: 4198912
ali-swift-global-savetime: 1748545107
x-cache: HIT TCP_HIT dirn:12:212066908
x-swift-savetime: Thu, 12 Jun 2025 04:50:03 GMT
x-swift-cachetime: 314201304
timing-allow-origin: *
eagleid: 2ff6309517527440190461916e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/g/CL/315/3/3150049/default.avif?web_v=v6.2.95
200 OK 9.9 kB URL GET safwee.mailax889.com/game_pictures/g/CL/315/3/3150049/default.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 64f4ba5918ae1cfd881f636a58c82c8f
953fda202fca9baf4ef751b9a7aab82ab2811ca3
b01b0f494261e0e064990323f83e81d39f27c1a9bd77c3a910017c959e57d2b6
GET /game_pictures/g/CL/315/3/3150049/default.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 9861
set-cookie: acw_tc=2ff6309717527440114441007e9ef914d19b2ccd5182d49fa8dfae2c85;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440114441007e9ef914d19b2ccd5182d49fa8dfae2c85;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F594307992E42776F
vary: Origin
accept-ranges: bytes
etag: "64F4BA5918AE1CFD881F636A58C82C8F"
last-modified: Wed, 16 Jul 2025 11:20:14 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5214947714691178319
x-oss-storage-class: Standard
cache-control: max-age=2678400,stale-while-revalidate=86400,immutable,proxy-revalidate,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: ZPS6WRiuHP2IH2NqWMgsjw==
x-oss-server-time: 20
via: cache12.l2fr1[0,0,200-0,H], cache11.l2fr1[1,0], ens-cache4.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:691475968
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 2674729
timing-allow-origin: *
eagleid: 2ff6309717527440114441007e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/StyleIndex.D6P3FLvQ.js
200 OK 25 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/StyleIndex.D6P3FLvQ.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (25360)
Hash 463bee6f65138307e16436945e2a98e7
5589ed6c9dce702c494ae70419d4d3c325a81751
08785984df63f7dcbf65f69749ba247e80a8ef2fad53a729e17a4192b77d833a
GET /assets/themes/StyleIndex.D6P3FLvQ.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/OfficeChannelIndex.DLVJObjn.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4313
date: Thu, 17 Jul 2025 08:08:25 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-6341"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: kE--Ysa8Drs21rfwZUArTMLzSHwALEvitAdgCHfEN5yjAUJk5lzxng==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95
200 OK 1.4 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash b5f683fefdc8a58fe763263ad8ef274e
7f7b768c9253d77f865303d0d4508d6486b71b8f
040abac16343f572f9e019e1638f70e934db351557fa33fc1e47d82340816e1a
GET /siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/svg+xml
set-cookie: acw_tc=2ff6309717527440207828799e66f92c217e07b009f4999d22672c2773;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440207828799e66f92c217e07b009f4999d22672c2773;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 08:37:54 GMT
x-oss-request-id: 6878B66113F9D41AA86A971B
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
etag: W/"B5F683FEFDC8A58FE763263AD8EF274E"
last-modified: Tue, 15 Jul 2025 11:53:27 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12668672709788670394
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: tfaD/v3IpY/nYyY62O8nTg==
x-oss-server-time: 2
via: cache29.l2fr1[0,0,200-0,H], cache12.l2fr1[1,0], ens-cache5.nl3[26,20,200-0,C], ens-cache3.nl3[21,0]
age: 2546
ali-swift-global-savetime: 1752741474
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:20 GMT
x-swift-cachetime: 602254
timing-allow-origin: *
eagleid: 2ff6309717527440207828799e
content-encoding: br
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/lobby/config/getAppDownloadInfo.json?v=1752722035
200 OK 2.9 kB URL GET safwee.mailax889.com/hall/api/lobby/config/getAppDownloadInfo.json?v=1752722035
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (2880), with no line terminators
Hash 2119ccbbbe57addf1dffc3ed49de17bc
05303a0d1503a4ec7b0aed10b9a34bb5755f4386
e640c129649d9ed8b3fd4277d98008acad0323538b1ba8f984130a24732b71b8
GET /hall/api/lobby/config/getAppDownloadInfo.json?v=1752722035 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 2244
set-cookie: acw_tc=2ff6309717527440183654293e272d3bd387a45f0c332aac1fb2523417;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440183654293e272d3bd387a45f0c332aac1fb2523417;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:11:26 GMT
x-oss-request-id: 6878BE3EDE6693A18B70887D
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: IRnMu75Xrd8d/8PtSd4XvA==
x-oss-server-time: 2
via: cache21.l2fr1[0,0,304-0,H], cache29.l2fr1[1,0], ens-cache3.nl3[22,33,200-0,H], ens-cache3.nl3[34,0]
vary: Accept-Encoding, Origin
last-modified: Thu, 17 Jul 2025 03:13:55 GMT
x-oss-hash-crc64ecma: 3842435785743106903
content-encoding: gzip
age: 532
ali-swift-global-savetime: 1752743486
x-cache: HIT TCP_REFRESH_HIT dirn:8:1277757113
x-swift-savetime: Thu, 17 Jul 2025 09:20:18 GMT
x-swift-cachetime: 68
timing-allow-origin: *
eagleid: 2ff6309717527440183654293e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/libs/browser-media-match@0.0.6/index.js
200 OK 3.2 kB URL GET d3mnhu2agy852k.cloudfront.net/libs/browser-media-match@0.0.6/index.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3248), with no line terminators
Hash 6ebc5c0381a7d5e83324d8f44fbe055a
716c0c49b5eed05fc5752e658e280a37b2eca14a
048412edb70558ba3a98abb4c3b99982679f8a941df859d41b2f18e0f56fde56
GET /libs/browser-media-match@0.0.6/index.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript
alt-svc: h3=":443"; ma=86400
age: 1752257
server: AliyunOSS
date: Fri, 27 Jun 2025 02:35:50 GMT
content-md5: brxcA4Gn1egzJNj0T74FWg==
x-oss-server-time: 19
x-oss-request-id: 685E0386447B51303490E8F3
content-encoding: br
cache-control: max-age=31622400
last-modified: Thu, 26 Jun 2025 13:04:28 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13106139430498415699
x-oss-storage-class: Standard
x-oss-meta-version: v6.2.9-v6.2.13
etag: W/"6EBC5C0381A7D5E83324D8F44FBE055A"
vary: accept-encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y3VGT_ozbqroji9vXKwooUkzpUA19b69DXMLd7FgcQ9rhSN0svMjTg==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/web/common/btn_zc1_2.avif?manualVersion=1&version=v6.2.95
200 OK 809 B URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/web/common/btn_zc1_2.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash fe5be5352845740b75590eeb27cf8e98
2338c2a6d5b957e181089fcd62df62ff95af7914
0fa17cc174883b05cfd546b94574585333dc022e7430e86a83354bc2b0da9c87
GET /siteadmin/skin/lobby_asset/1-0-11/web/common/btn_zc1_2.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 809
set-cookie: acw_tc=2ff6309717527440110318255ebdd6d703075c3c1c42a396ef0302bfb6;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440110318255ebdd6d703075c3c1c42a396ef0302bfb6;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79FCD3972541A42DF22
vary: Origin
accept-ranges: bytes
etag: "FE5BE5352845740B75590EEB27CF8E98"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10579611477085031381
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: /lvlNShFdAt1WQ7rJ8+OmA==
x-oss-server-time: 15
via: cache24.l2fr1[0,0,200-0,H], cache5.l2fr1[1,0], ens-cache2.nl3[0,17,200-0,H], ens-cache3.nl3[20,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:17818373
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440110318255e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_ty_1.avif?manualVersion=1&version=v6.2.95
200 OK 1.5 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_ty_1.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 487de5852c1b243c0aaf7c7c0fa80001
2e8dca64156864e28f4276083c366d3622d0c0e0
654c49848cbb245978e7917e4e2c8db2eda2482d3d5992d49e392306cd54ebd6
GET /siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_ty_1.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1525
set-cookie: acw_tc=2ff6309717527440110388271e2d901ca6b9752e899dd491ecf04fdd18;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440110388271e2d901ca6b9752e899dd491ecf04fdd18;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F7DAC2C0B3344243D
vary: Origin
accept-ranges: bytes
etag: "487DE5852C1B243C0AAF7C7C0FA80001"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17626601959399675298
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: SH3lhSwbJDwKr3x8D6gAAQ==
x-oss-server-time: 7
via: cache27.l2fr1[0,0,200-0,H], cache18.l2fr1[1,0], ens-cache7.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:166560546
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440110388271e
X-Firefox-Spdy: h2
GET accounts.google.com/gsi/iframe/select?client_id=1064051380568-p21itvinla9ndp0chmi9t7crgiu3u9uv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=FPO4OSm5Fdq7VcdpQ9qtUU_B1gRCOnfZjsfHDXZvBcQ&is_itp=true&channel_id=b961c7782fa8179b36b846d8b2ac912bf6ecad1e94b4268b04f092c3e1b5113b&origin=https%3A%2F%2Fd3mnhu2agy852k.cloudfront.net&oauth2_auth_url=https%3A%2F%2Faccounts.google.com%2Fo%2Foauth2%2Fv2%2Fauth
200 OK 266 kB URL GET accounts.google.com/gsi/iframe/select?client_id=1064051380568-p21itvinla9ndp0chmi9t7crgiu3u9uv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=FPO4OSm5Fdq7VcdpQ9qtUU_B1gRCOnfZjsfHDXZvBcQ&is_itp=true&channel_id=b961c7782fa8179b36b846d8b2ac912bf6ecad1e94b4268b04f092c3e1b5113b&origin=https%3A%2F%2Fd3mnhu2agy852k.cloudfront.net&oauth2_auth_url=https%3A%2F%2Faccounts.google.com%2Fo%2Foauth2%2Fv2%2Fauth
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintAB:9E:66:9E:C9:58:81:70:51:A3:3F:A9:93:14:88:CB:0D:6D:EC:50
ValidityMon, 23 Jun 2025 08:40:23 GMT - Mon, 15 Sep 2025 08:40:22 GMT
File type HTML document, ASCII text, with very long lines (63769)
Size 266 kB (265603 bytes)
Hash 5a96b3ff19432b6b9f6fd475f8ca9f8f
34e032df1a45eae58d7c83d91b34ed120706c45a
9b6cac4384773aa4a5d25b870059f7f30bd8592da4af0002c37e28b5831d4a68
GET /gsi/iframe/select?client_id=1064051380568-p21itvinla9ndp0chmi9t7crgiu3u9uv.apps.googleusercontent.com&ux_mode=popup&ui_mode=card&as=FPO4OSm5Fdq7VcdpQ9qtUU_B1gRCOnfZjsfHDXZvBcQ&is_itp=true&channel_id=b961c7782fa8179b36b846d8b2ac912bf6ecad1e94b4268b04f092c3e1b5113b&origin=https%3A%2F%2Fd3mnhu2agy852k.cloudfront.net&oauth2_auth_url=https%3A%2F%2Faccounts.google.com%2Fo%2Foauth2%2Fv2%2Fauth HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 17 Jul 2025 09:20:14 GMT
cross-origin-embedder-policy: require-corp
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-a4NUlwc6SfXTQb5_ZAoD-g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET d3mnhu2agy852k.cloudfront.net/assets/workers-qy9Jwbtu.js
200 OK 4.4 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/workers-qy9Jwbtu.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, ASCII text
Hash d6e1cc2d959d07155b487d4911b6087e
6334fce87963b6c07edbcc4277bf01565b9d0798
b5b10a66bb72a298d200bc6c64734fc38faf8770a3e0f2a8ed5de79a0e07ef7a
GET /assets/workers-qy9Jwbtu.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript
alt-svc: h3=":443"; ma=86400
age: 2245041
server: AliyunOSS
date: Sat, 21 Jun 2025 09:42:47 GMT
x-oss-request-id: 68567E97AA0DCC3635A0CC7E
etag: W/"D6E1CC2D959D07155B487D4911B6087E"
last-modified: Sat, 21 Jun 2025 07:02:35 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10918190586927633353
x-oss-storage-class: Standard
x-oss-meta-version: v6.1.100-v6.1.102
cache-control: max-age=31622400
content-md5: 1uHMLZWdBxVbSH1JEbYIfg==
x-oss-server-time: 4
content-encoding: br
vary: Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Zl01lft75eb0ZCwckHH8IbIlPRnKquZvy6gnt6VK9xkmKsxka73pjw==
GET safwee.mailax889.com/cocos/maintain-time.json?timestamp=1752744009906
404 Not Found 401 B URL GET safwee.mailax889.com/cocos/maintain-time.json?timestamp=1752744009906
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type XML 1.0 document, ASCII text
Hash 3c81065c079725a3c3c91e6ba7be932f
0c549b05ebb7d7d47435fbf40dbb6cfd99bee4a0
f9d60165a2913f0c589401cfcca75ca86851bc93d63cf04694ff544927149a34
GET /cocos/maintain-time.json?timestamp=1752744009906 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: Tengine
content-type: application/xml
content-length: 401
set-cookie: acw_tc=2ff6309717527440099496404e16e7a005f9843156c407abcd4bfad9c2;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440099496404e16e7a005f9843156c407abcd4bfad9c2;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:10 GMT
x-oss-request-id: 6878C04ADE6693A18B779784
vary: Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
x-oss-server-time: 2
x-oss-ec: 0026-00000001
via: cache39.l2fr1[225,225,404-0,M], cache26.l2fr1[226,0], ens-cache12.nl3[291,290,404-1280,M], ens-cache3.nl3[292,0]
cache-control: no-cache
ali-swift-global-savetime: 1752744010
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-error: orig response 4XX error
x-swift-savetime: Thu, 17 Jul 2025 09:20:10 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 2ff6309717527440099496404e
X-Firefox-Spdy: h2
GET cgrsdf.olympus9a.com/ipacdn.txt
200 OK 2 B URL GET cgrsdf.olympus9a.com/ipacdn.txt
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subjectcgrsdf.olympus9a.com
FingerprintA5:7B:19:45:6D:93:43:61:00:BA:CC:EF:C0:2A:6B:BF:F5:4F:2C:A6
ValidityTue, 20 May 2025 12:23:38 GMT - Mon, 18 Aug 2025 13:23:35 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /ipacdn.txt HTTP/1.1
Host: cgrsdf.olympus9a.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 17 Jul 2025 09:20:19 GMT
content-type: text/plain
content-length: 2
set-cookie: acw_tc=0a0ccaae17527440190988095e49fdf37d20eec13678a8e17f3a386059f003;path=/;HttpOnly;Max-Age=1800
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
cf-cache-status: BYPASS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 9608a9a68d170b41-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95
200 OK 1.4 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash b5f683fefdc8a58fe763263ad8ef274e
7f7b768c9253d77f865303d0d4508d6486b71b8f
040abac16343f572f9e019e1638f70e934db351557fa33fc1e47d82340816e1a
GET /siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/svg+xml
set-cookie: acw_tc=2ff6309717527440207788782edb9adcd6b84a76f28e3e65d72d3a17f8;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440207788782edb9adcd6b84a76f28e3e65d72d3a17f8;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 08:37:54 GMT
x-oss-request-id: 6878B66113F9D41AA86A971B
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
etag: W/"B5F683FEFDC8A58FE763263AD8EF274E"
last-modified: Tue, 15 Jul 2025 11:53:27 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12668672709788670394
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: tfaD/v3IpY/nYyY62O8nTg==
x-oss-server-time: 2
via: cache29.l2fr1[0,0,200-0,H], cache12.l2fr1[1,0], ens-cache5.nl3[26,21,200-0,C], ens-cache3.nl3[25,0]
age: 2546
ali-swift-global-savetime: 1752741474
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:20 GMT
x-swift-cachetime: 602254
timing-allow-origin: *
eagleid: 2ff6309717527440207788782e
content-encoding: br
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_NoticePageChunk.DQnMHxLK.js
200 OK 72 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_NoticePageChunk.DQnMHxLK.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 51d87ed0068ab99c6d4f8e5d1763e5f1
e4e7ae37f614880277a45506827945fcf4d2224f
19141dbd355e53980d1344150d9374ece6fa5836a0590498c24ab2d116ebb02b
GET /assets/themes/2_NoticePageChunk.DQnMHxLK.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/OfficeChannelIndex.DLVJObjn.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4315
date: Thu, 17 Jul 2025 08:08:19 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-11766"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AC-xClxMpBs8fTi-aKS9ETODe_wvcxYmRktCuNqYKs_uQhuJxTiJGA==
GET safwee.mailax889.com/hall/gameApi/v1/hall/gameRule/saasStatic/loginUrl.json
200 OK 1.1 kB URL GET safwee.mailax889.com/hall/gameApi/v1/hall/gameRule/saasStatic/loginUrl.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash e36ee734f506d3c09ca21b672eb47f19
13954218495781b7d5979759fd13039d77514786
d2355b0f50e8071d037595c3a0e6d356acbf3fe692829a4004fcc24b6531b140
GET /hall/gameApi/v1/hall/gameRule/saasStatic/loginUrl.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 292
set-cookie: acw_tc=2ff6309717527440097056024e31391a4f93633209f89320bae3e165e9;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440097056024e31391a4f93633209f89320bae3e165e9;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 12:59:06 GMT
x-oss-request-id: 6877A21A12A9C80A6E4252C0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: 427nNPUG08CcohtnLrR/GQ==
x-oss-server-time: 4
via: cache4.l2fr1[0,0,304-0,H], cache17.l2fr1[1,0], ens-cache3.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
vary: Accept-Encoding, Origin
last-modified: Fri, 11 Jul 2025 08:38:59 GMT
x-oss-hash-crc64ecma: 6370512586194033823
content-encoding: gzip
age: 73263
ali-swift-global-savetime: 1752670746
x-cache: HIT TCP_HIT dirn:12:214247431
x-swift-savetime: Wed, 16 Jul 2025 23:39:04 GMT
x-swift-cachetime: 48002
timing-allow-origin: *
eagleid: 2ff6309717527440097056024e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_qp_1.avif?manualVersion=1&version=v6.2.95
200 OK 2.1 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_qp_1.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash b89d650887b77956b6b302ca914b279a
3640f9b100def709036b82738fc2f36eee68cedf
e0f75409a27f37a51bc994afde504eb80f9675cf08d96834ab0701528487b4f6
GET /siteadmin/skin/lobby_asset/1-0-common/common/_sprite/icon_dtfl_qp_1.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 2068
set-cookie: acw_tc=2ff6309717527440110378269e13a81b71d5b1e7a52aaf3c7fd0dc99b8;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440110378269e13a81b71d5b1e7a52aaf3c7fd0dc99b8;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F33781BE32A257B25
vary: Origin
accept-ranges: bytes
etag: "B89D650887B77956B6B302CA914B279A"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15104775051050396667
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: uJ1lCIe3eVa2swLKkUsnmg==
x-oss-server-time: 2
via: cache24.l2fr1[0,0,200-0,H], cache25.l2fr1[2,0], ens-cache10.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:114400901
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440110378269e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_DownloadDialogsChunk.Bl3yI-i9.js
200 OK 39 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/2_DownloadDialogsChunk.Bl3yI-i9.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (37849)
Hash 4b77e1b4c8cf7c1d896a8e4aa8589e6f
fa94005029cde8e4df4519655ddbd0ea37221bb3
00daa291b71420b68a3bfcfb4c36f6bb95d7f5184279bb1ad0e0c76fb92c4800
GET /assets/themes/2_DownloadDialogsChunk.Bl3yI-i9.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/index.DzkESG6a.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 7043
date: Thu, 17 Jul 2025 07:22:44 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-98a7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -dgpknAT-ixRVVwpG8_TJELTrk1M6P-fSMeixnLhUxJvjyDP8Aquaw==
GET safwee.mailax889.com/siteadmin/upload/img/1945448835168813058.avif
200 OK 41 kB URL GET safwee.mailax889.com/siteadmin/upload/img/1945448835168813058.avif
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 2c1c9a224a5bc629fedbd34a18d7f35e
85696e208e750d9dd4358d8e0545c83e4dd2b3b7
475343b4b647be0375f3c74cd008420136d259b9ae8a8bf90354e31f6e0c7c06
GET /siteadmin/upload/img/1945448835168813058.avif HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 40769
set-cookie: acw_tc=2ff6309717527440111748472e77fd8f45b7cd2cd39a3791f351cdd6e6;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440111748472e77fd8f45b7cd2cd39a3791f351cdd6e6;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 11:50:29 GMT
x-oss-request-id: 68779205304E2EF85FD54FC8
vary: Origin
accept-ranges: bytes
etag: "2C1C9A224A5BC629FEDBD34A18D7F35E"
last-modified: Wed, 16 Jul 2025 11:42:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12408909535493295711
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: LByaIkpbxin+29NKGNfzXg==
x-oss-server-time: 6
via: cache13.l2fr1[0,0,200-0,H], cache39.l2fr1[1,0], ens-cache10.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 77382
ali-swift-global-savetime: 1752666629
x-cache: HIT TCP_HIT dirn:11:674604128
x-swift-savetime: Wed, 16 Jul 2025 14:28:42 GMT
x-swift-cachetime: 76907
timing-allow-origin: *
eagleid: 2ff6309717527440111748472e
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-2V9RR8N0JM&cx=c>m=45He57f1v9221228708za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104732253~104732255~104908321~104908323~104921715~104921717~104964065~104964067~104967141~104967143
200 OK 399 kB URL GET www.googletagmanager.com/gtag/js?id=G-2V9RR8N0JM&cx=c>m=45He57f1v9221228708za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104732253~104732255~104908321~104908323~104921715~104921717~104964065~104964067~104967141~104967143
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20
ValidityMon, 23 Jun 2025 08:40:16 GMT - Mon, 15 Sep 2025 08:40:15 GMT
File type JavaScript source, ASCII text, with very long lines (6004)
Size 399 kB (399430 bytes)
Hash 186f68b2eb14e043b1468e16c4ec578b
7e89b947abeeb9c46fffb483dd8292bafc2361b4
1e1d0a358ee4530628c2e7873d2dc9c1d9121332488d36015abff87782e305b5
GET /gtag/js?id=G-2V9RR8N0JM&cx=c>m=45He57f1v9221228708za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104732253~104732255~104908321~104908323~104921715~104921717~104964065~104964067~104967141~104967143 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 17 Jul 2025 09:20:15 GMT
expires: Thu, 17 Jul 2025 09:20:15 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 132954
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET safwee.mailax889.com/hall/api/active/tasks/newcomer_benefit_reward/default.json?v=1752740439
200 OK 1.8 kB URL GET safwee.mailax889.com/hall/api/active/tasks/newcomer_benefit_reward/default.json?v=1752740439
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (1772), with no line terminators
Hash 6a11645c97e501a25b61a9a49daadad9
5b52e5fe7b8895119d602f80b5c60be1e319aebf
7f38affeb80a0ddcbdd5628e3ee771af22b88788a0f2f11db806fc7363ab7f5b
GET /hall/api/active/tasks/newcomer_benefit_reward/default.json?v=1752740439 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 1410
set-cookie: acw_tc=2ff6309717527440190575494e49db32a2db25b964ed1ca1fba1cd9c20;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440190575494e49db32a2db25b964ed1ca1fba1cd9c20;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:12 GMT
x-oss-request-id: 6878C04CDA25D35C4F8D2F5F
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Thu, 17 Jul 2025 08:20:39 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7484583437090168893
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: ahFkXJflAaJbYamknara2Q==
x-oss-server-time: 2
content-encoding: gzip
via: cache29.l2fr1[257,257,200-0,M], cache32.l2fr1[258,0], ens-cache11.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 7
ali-swift-global-savetime: 1752744012
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:12 GMT
x-swift-cachetime: 600
timing-allow-origin: *
eagleid: 2ff6309717527440190575494e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/p/1889/L1/301/3/custom_VND.avif?web_v=v6.2.95
200 OK 21 kB URL GET safwee.mailax889.com/game_pictures/p/1889/L1/301/3/custom_VND.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 3f493e02c1c8939200c7d0896d04a25b
cc9cd20b4b59ca64e1ae5e2829b55547ae0c66fe
dde6626bc76fac21a6681c587939fd1ac4fb4528347127112bec7840e06a037a
GET /game_pictures/p/1889/L1/301/3/custom_VND.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 21097
set-cookie: acw_tc=2ff6309717527440109758162ea35a21eab359eb62df379460c7d807b3;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440109758162ea35a21eab359eb62df379460c7d807b3;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:03 GMT
x-oss-request-id: 6878A7A7DA25D35C4F3A4AD2
vary: Origin
accept-ranges: bytes
etag: "3F493E02C1C8939200C7D0896D04A25B"
last-modified: Wed, 16 Jul 2025 11:51:13 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1676279594313610486
x-oss-storage-class: Standard
cache-control: public,s-maxage=86400,max-age=2592000,stale-while-revalidate=86400,immutable,proxy-revalidate
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: P0k+AsHIk5IAx9CJbQSiWw==
x-oss-server-time: 5
via: cache3.l2fr1[0,0,200-0,H], cache10.l2fr1[1,0], ens-cache12.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6307
ali-swift-global-savetime: 1752737703
x-cache: HIT TCP_HIT dirn:12:585896694
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 82738
timing-allow-origin: *
eagleid: 2ff6309717527440109758162e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/game/hall/listVirtualBonusPoolV2/currency/VND.json
200 OK 3.0 kB URL GET safwee.mailax889.com/hall/api/game/hall/listVirtualBonusPoolV2/currency/VND.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (2968), with no line terminators
Hash 38826beca99e660bb169fb6760cb7ec2
f1c8dfd22b721d0e4059a92bd732bf6b07e2c68d
4294f7d4dfef4f889fe9df41e7fa63289e1727a10e61bc4187a5830890538fcd
GET /hall/api/game/hall/listVirtualBonusPoolV2/currency/VND.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 2303
set-cookie: acw_tc=2ff6309717527440111818485e0620f55a838257f7bfa15eeefca13507;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440111818485e0620f55a838257f7bfa15eeefca13507;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:11 GMT
x-oss-request-id: 6878C04B1E3C92E64D79BF23
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Thu, 17 Jul 2025 09:19:55 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10709075457570186823
x-oss-storage-class: Standard
cache-control: s-maxage=300,public,max-age=0
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: OIJr7KmeZguxaftnYMt+wg==
x-oss-server-time: 2
content-encoding: gzip
via: cache4.l2fr1[226,226,200-0,M], cache38.l2fr1[228,0], ens-cache1.nl3[294,294,200-0,M], ens-cache3.nl3[296,0]
ali-swift-global-savetime: 1752744011
x-cache: MISS TCP_REFRESH_MISS dirn:12:549879149
x-swift-savetime: Thu, 17 Jul 2025 09:20:11 GMT
x-swift-cachetime: 300
timing-allow-origin: *
eagleid: 2ff6309717527440111818485e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-@sentry.6viaZao7.js
200 OK 336 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/vendors/vendor-@sentry.6viaZao7.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 336 kB (336043 bytes)
Hash 87fbeb79c5e7a17a5b12566307cfd347
5d96f270dca53747441fc8452b857dd0e510d48a
d57cbf2f3d44db5cabac8a14bc6ab6ccfa54ede78ef9ea135f4661c3b77826dd
GET /assets/vendors/vendor-@sentry.6viaZao7.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/index.DzkESG6a.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript
alt-svc: h3=":443"; ma=86400
age: 3460881
server: AliyunOSS
date: Sat, 07 Jun 2025 07:58:46 GMT
x-oss-request-id: 6843F136FE67F33438F2D67F
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
etag: W/"87FBEB79C5E7A17A5B12566307CFD347"
last-modified: Fri, 16 May 2025 09:11:37 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8011717243618773825
x-oss-storage-class: Standard
x-oss-meta-version: v6.0.74
cache-control: max-age=31622400
content-md5: h/vrecXnoXpbElZjB8/TRw==
x-oss-server-time: 6
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4OUUK-cKQ54qt6NRn2YfffRXctPypeosYXE3yZpvY-RZMwQLiG-NEQ==
GET accounts.google.com/gsi/status?client_id=1064051380568-p21itvinla9ndp0chmi9t7crgiu3u9uv.apps.googleusercontent.com&cas=8YT9%2Bo1BKeK8GJPgOkYdfJSHe3VjXvtb4X5Bnmi06U8&has_opted_out_fedcm=false
200 OK 72 B URL GET accounts.google.com/gsi/status?client_id=1064051380568-p21itvinla9ndp0chmi9t7crgiu3u9uv.apps.googleusercontent.com&cas=8YT9%2Bo1BKeK8GJPgOkYdfJSHe3VjXvtb4X5Bnmi06U8&has_opted_out_fedcm=false
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subject*.google.com
FingerprintAB:9E:66:9E:C9:58:81:70:51:A3:3F:A9:93:14:88:CB:0D:6D:EC:50
ValidityMon, 23 Jun 2025 08:40:23 GMT - Mon, 15 Sep 2025 08:40:22 GMT
Hash c2486053cab63f980759a9695d6e71ab
d2f703a89fa7ffb26c5700d21010e43fcbdbcd11
509c3f69a863d98cfb1245e3b40791673cf1e5d6435a8151315a39c7eafa394e
GET /gsi/status?client_id=1064051380568-p21itvinla9ndp0chmi9t7crgiu3u9uv.apps.googleusercontent.com&cas=8YT9%2Bo1BKeK8GJPgOkYdfJSHe3VjXvtb4X5Bnmi06U8&has_opted_out_fedcm=false HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/json; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-content-type-options: nosniff
access-control-allow-origin: https://d3mnhu2agy852k.cloudfront.net
access-control-allow-credentials: true
access-control-allow-methods: GET
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 17 Jul 2025 09:20:12 GMT
content-disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-g_k0-dkGy-j69xKny40Arg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/assets.hash.json?timestamp=1752744015912
200 OK 125 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/assets.hash.json?timestamp=1752744015912
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Size 125 kB (124612 bytes)
Hash 9c4ed9fa6b72850c55020cbb8302be93
e856fa15dd7a6dfe1543806feaf2c33ac60b215f
22f8ecfaf75f51f02452cda745893ee341782984ca035e936a979e01cf7bc5a4
GET /siteadmin/skin/lobby_asset/1-0-11/assets.hash.json?timestamp=1752744015912 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
set-cookie: acw_tc=2ff6309717527440159408087e3c34b4134b8fe4fb085ece9b9e5b0ab2;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440159408087e3c34b4134b8fe4fb085ece9b9e5b0ab2;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:16 GMT
x-oss-request-id: 6878C050304E2EF85F6BCF79
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17972383718990803950
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: nE7Z+mtyhQxVAgy7gwK+kw==
x-oss-server-time: 2
content-encoding: gzip
via: cache6.l2fr1[255,255,200-0,M], cache2.l2fr1[256,0], ens-cache7.nl3[280,279,200-0,M], ens-cache3.nl3[280,0]
ali-swift-global-savetime: 1752744016
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:16 GMT
x-swift-cachetime: 604800
timing-allow-origin: *
eagleid: 2ff6309717527440159408087e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95
200 OK 1.4 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash b5f683fefdc8a58fe763263ad8ef274e
7f7b768c9253d77f865303d0d4508d6486b71b8f
040abac16343f572f9e019e1638f70e934db351557fa33fc1e47d82340816e1a
GET /siteadmin/skin/lobby_asset/common/web/message/icon_message_pmd.svg?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/svg+xml
set-cookie: acw_tc=2ff6309717527440207838805e1a52428f661addde343dccf1fee9e5ee;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440207838805e1a52428f661addde343dccf1fee9e5ee;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 08:37:54 GMT
x-oss-request-id: 6878B66113F9D41AA86A971B
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
etag: W/"B5F683FEFDC8A58FE763263AD8EF274E"
last-modified: Tue, 15 Jul 2025 11:53:27 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12668672709788670394
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: tfaD/v3IpY/nYyY62O8nTg==
x-oss-server-time: 2
via: cache29.l2fr1[0,0,200-0,H], cache29.l2fr1[1,0], ens-cache3.nl3[22,22,200-0,M], ens-cache3.nl3[25,0]
age: 2546
ali-swift-global-savetime: 1752741474
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:20 GMT
x-swift-cachetime: 602254
timing-allow-origin: *
eagleid: 2ff6309717527440207838805e
content-encoding: br
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/upload/img/1945441178175434754.avif
200 OK 7.6 kB URL GET safwee.mailax889.com/siteadmin/upload/img/1945441178175434754.avif
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash d60c74e79f0ec1770092768810c80416
752462b08ebab2d4c5ca288cb85889cb03079840
13622ddc76cbae26b054eb54471acc04728f2a0c1f53a0c6fb4711d3b2bd1d1f
GET /siteadmin/upload/img/1945441178175434754.avif HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 7578
set-cookie: acw_tc=2ff6309717527440108147889e27be47e34dcda591c65e48dd836ce77f;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440108147889e27be47e34dcda591c65e48dd836ce77f;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 11:37:40 GMT
x-oss-request-id: 68778F04EE8E2834AAF79F4D
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
vary: Origin
etag: "D60C74E79F0EC1770092768810C80416"
last-modified: Wed, 16 Jul 2025 11:11:37 GMT
x-oss-hash-crc64ecma: 13518750633498913764
content-md5: 1gx0558OwXcAknaIEMgEFg==
x-oss-server-time: 4
via: cache24.l2fr1[205,205,200-0,H], cache36.l2fr1[206,0], ens-cache6.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 78150
ali-swift-global-savetime: 1752665860
x-cache: HIT TCP_HIT dirn:11:221071571
x-swift-savetime: Wed, 16 Jul 2025 11:37:40 GMT
x-swift-cachetime: 86400
timing-allow-origin: *
eagleid: 2ff6309717527440108147889e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/1_PromoteChunk.BdHRzqZi.js
200 OK 250 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/1_PromoteChunk.BdHRzqZi.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators
Size 250 kB (249542 bytes)
Hash 3205007b5d5ea282a3ea84e4b51931ce
32a6497f6739aa3ecc21d1358203debf0da25859
240cf32d80cc46fed4624267edcfeac6a9ea5f32e579d26c430a6e294bc884e4
GET /assets/themes/1_PromoteChunk.BdHRzqZi.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/OfficeChannelIndex.DLVJObjn.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4315
date: Thu, 17 Jul 2025 08:08:19 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-3cec6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5UxZLhiIbwReMzM9Lz2I_0pFl1_sy5wMg0UqyS170DgAd350cep9ig==
GET dsfsf.mahjong9a.com/ipacdn.txt
200 OK 2 B URL GET dsfsf.mahjong9a.com/ipacdn.txt
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerGoogle Trust Services
Subjectdsfsf.mahjong9a.com
Fingerprint92:B6:C6:AD:F2:03:E7:F8:4A:78:9E:1A:C8:B1:55:41:EE:EB:3C:F3
ValidityTue, 20 May 2025 12:26:24 GMT - Mon, 18 Aug 2025 13:26:18 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /ipacdn.txt HTTP/1.1
Host: dsfsf.mahjong9a.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 17 Jul 2025 09:20:19 GMT
content-type: text/plain
content-length: 2
set-cookie: acw_tc=0a0ccaae17527440190818681e4a388bb592a086e28ff8e948b36ab14b1180;path=/;HttpOnly;Max-Age=1800
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
cf-cache-status: BYPASS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=15552000
server: cloudflare
cf-ray: 9608a9a6880a56c7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/active/entry_icon29.avif
200 OK 36 kB URL GET safwee.mailax889.com/siteadmin/active/entry_icon29.avif
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ISO Media, AVIF Image Sequence
Hash 1e968159e62b5cb09521fd92da126f30
885b0a57dc7482e2264864934304a45390cd7558
59d07f48853e4eb96dd79b0e6b80c11eac2e2e7165beb4fff65ae0b027604090
GET /siteadmin/active/entry_icon29.avif HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 35477
set-cookie: acw_tc=2ff6309717527440198896734e79a686e0c27f2f9b4b6caeb850065e37;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440198896734e79a686e0c27f2f9b4b6caeb850065e37;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Wed, 16 Jul 2025 11:50:34 GMT
x-oss-request-id: 6877920ACC39EA4C5EF1187F
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: max-age=86400
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: HpaBWeYrXLCVIf2S2hJvMA==
x-oss-server-time: 3
via: cache21.l2fr1[0,0,304-0,H], cache39.l2fr1[1,0], ens-cache1.nl3[0,0,200-0,H], ens-cache3.nl3[2,0]
vary: Origin
etag: "1E968159E62B5CB09521FD92DA126F30"
last-modified: Thu, 15 May 2025 13:40:05 GMT
x-oss-hash-crc64ecma: 6555506501207241065
age: 77385
ali-swift-global-savetime: 1752666634
x-cache: HIT TCP_HIT dirn:12:719817421
x-swift-savetime: Wed, 16 Jul 2025 14:28:43 GMT
x-swift-cachetime: 76911
timing-allow-origin: *
eagleid: 2ff6309717527440198896734e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/Style4Index.BgSodrdk.css
200 OK 21 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/Style4Index.BgSodrdk.css
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with very long lines (21238)
Hash e7f6135cb146513ea0473abf363a223b
5df1629f4e1bb133f29026e2fa62f76b5c191074
51543c4840e82a4f08551403b9fde0e53bbc322c4463c6964dfaf273726f880f
GET /assets/themes/Style4Index.BgSodrdk.css HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css
alt-svc: h3=":443"; ma=86400
age: 4316
date: Thu, 17 Jul 2025 08:08:14 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-52f7"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _fsXzlwyQXolXOnkFqtJOhYYhGy7_LPF05hOvW0W33YqXKQbp5QWEg==
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1gd.avif?manualVersion=1&version=v6.2.95
200 OK 1.6 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1gd.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 6f5cb7ab09cc1025a87f620b9e3cc965
f1cd3c14492dae2fb5f6724eb59a4f96be28b98f
5332b11d91c00ee1fa4f29e94b5d689e5c5980827b984a3fbd999e3b5c0780f3
GET /siteadmin/skin/lobby_asset/1-0-11/common/_sprite/icon_dt_1gd.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 1571
set-cookie: acw_tc=2ff6309717527440108147900ed908ce158652c5840e7c5070d440eaac;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440108147900ed908ce158652c5840e7c5070d440eaac;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F7DAC2C0B334423D7
vary: Origin
accept-ranges: bytes
etag: "6F5CB7AB09CC1025A87F620B9E3CC965"
last-modified: Wed, 16 Jul 2025 11:20:07 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8353034930746110871
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: b1y3qwnMECWof2ILnjzJZQ==
x-oss-server-time: 4
via: cache36.l2fr1[0,0,200-0,H], cache25.l2fr1[1,0], ens-cache5.nl3[0,0,200-0,H], ens-cache3.nl3[10,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:248858629
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440108147900e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/backstage/customer/getWebTrans/language/vi.json?v=1752740975
200 OK 1.5 MB URL GET safwee.mailax889.com/hall/api/backstage/customer/getWebTrans/language/vi.json?v=1752740975
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 1.5 MB (1532140 bytes)
Hash 46787eb677dbc1063974800871e03d25
604ef5501605377c5f5cf4469557a8e679d25569
22ad0699f52071192a0a2f2f90fee738e628016927c9cd1275451164995a51e5
GET /hall/api/backstage/customer/getWebTrans/language/vi.json?v=1752740975 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 989920
set-cookie: acw_tc=2ff6309717527440169981623e7baa7bb756b49ac7a8dfa416b80dfa35;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440169981623e7baa7bb756b49ac7a8dfa416b80dfa35;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:19:10 GMT
x-oss-request-id: 6878C00E690BB9DF0F7E869C
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
vary: Accept-Encoding, Origin
last-modified: Thu, 17 Jul 2025 08:29:35 GMT
x-oss-hash-crc64ecma: 4639243148242231208
content-md5: Rnh+tnfbwQY5dIAIceA9JQ==
x-oss-server-time: 3
content-encoding: gzip
via: cache30.l2fr1[0,0,200-0,H], cache25.l2fr1[1,0], ens-cache12.nl3[23,23,200-0,M], ens-cache3.nl3[25,0]
age: 66
ali-swift-global-savetime: 1752743950
x-cache: MISS TCP_MISS dirn:12:597685079
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 533
timing-allow-origin: *
eagleid: 2ff6309717527440169981623e
X-Firefox-Spdy: h2
POST fvsdt.ax88aa.top/hall/api/gohal/heartbeat
200 OK 88 B URL POST fvsdt.ax88aa.top/hall/api/gohal/heartbeat
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash ec6f6e80a3b378494abedee2ce381824
6f576bf1325997a5d9d753fca5bf2e73795b7866
cca882420dce6abc96891c4b0eee42d923b83aabcb333558c21aa3eed239ca3d
POST /hall/api/gohal/heartbeat HTTP/1.1
Host: fvsdt.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: vi
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
x-object-id: {"uid":"","browserLanguage":"en-US","init":{"device":"","created":1752744008113,"version":1752667351000}}
platformType: 5
devicetype: 3
x-device: 1-5
x-data-mode: chipher
x-request-id: 983e554f-e45d-4202-9608-8d4a8b74a2b4
device: 8f89dae3-1a57-4f86-bf7d-e6eea88a14de
currency: VND
timestamp: 1752744017
nonce: 983e554f-e45d-4202-9608-8d4a8b74a2b4
sign: icZRYwtnVPIXYtUfwxw8Afm3Hxb/bWiB9Nrv1x6mLvyLhabYv1KMPJhDbs8n6ylH
siteCode: 1889
language: vi
token: b2e3d672-9d88-47a7-81b4-9d7ffc62054f
auth: undefined
deviceModel: Firefox v134.0
physicalDeviceModel: unknown
operatingSystem: Windows
deviceBrand: unknown
browserType: Firefox v134.0
appSystem: Windows 10
domain: d3mnhu2agy852k.cloudfront.net
webauthnDomain: d3mnhu2agy852k.cloudfront.net
clienttimezone: 0
x-custom-referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
x-version: 6.2.95
browserfingerid:
appVersion: v6.2.95
Content-Length: 44
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/plain; charset=utf-8
content-length: 88
set-cookie: acw_tc=2ff630a017527440195214812ef4f890bc92581faf69c74a6530103721;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440195214812ef4f890bc92581faf69c74a6530103721;path=/;HttpOnly;Max-Age=3600
acw_tc=0a0f6b7317527440198342432e521146d24f786a746ead616d192abe9d2e5d;path=/;HttpOnly;Max-Age=1800
UserKey=jV9Gjicd-efXMI6vYFTa60s0w_7T9hNqmwGb7t3eX2LYqz6j3VE4oRnMJPuxhgaT; Path=/; Expires=Fri, 17 Jul 2026 09:20:19 GMT; Max-Age=31535999; HttpOnly
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:19 GMT
api-cache: false
cache-control: no-cache
x-env-go-biz-gateway: 0
x-env-go-biz-gohal-server: 0
x-server-version: 4.0.0
x-trace-id: 11d34d3367318cdc
access-control-allow-methods: *
access-control-max-age: 3600
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: X-Trace-ID, newjwt, token
via: cache21.l2fr1[473,472,200-0,M], cache21.l2fr1[473,0], ens-cache12.nl3[495,494,200-0,M], ens-cache12.nl3[496,0]
ali-swift-global-savetime: 1752744019
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:20 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 2ff630a017527440195214812e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/version.json
200 OK 4.7 kB URL GET safwee.mailax889.com/hall/version.json
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 1be18e914188dc972a1538ce6d0c905f
6559529b099dae1728146403ce63cac94fd2b561
ea7653a05737db6706bccd4175b3a36c71f97e070b7a80805cb8acce45ba3f9f
GET /hall/version.json HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 1326
set-cookie: acw_tc=2ff6309717527440095795829ea413e751db2aa68cc1f9e626a0d35c8d;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440095795829ea413e751db2aa68cc1f9e626a0d35c8d;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:09 GMT
x-oss-request-id: 6878C049CD3972541A965E11
vary: Accept-Encoding, Origin
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
last-modified: Thu, 17 Jul 2025 09:19:25 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10805008171849789485
x-oss-storage-class: Standard
cache-control: no-cache
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: G+GOkUGI3JcqFTjObQyQXw==
x-oss-server-time: 2
content-encoding: gzip
via: cache8.l2fr1[251,251,200-0,M], cache23.l2fr1[253,0], ens-cache7.nl3[319,319,200-0,M], ens-cache3.nl3[322,0]
ali-swift-global-savetime: 1752744009
x-cache: MISS TCP_REFRESH_MISS dirn:11:166558248
x-swift-savetime: Thu, 17 Jul 2025 09:20:09 GMT
x-swift-cachetime: -1
timing-allow-origin: *
eagleid: 2ff6309717527440095795829e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/hall/api/active/tasks/pop_newcomerBenefit/currency/VND/language/vi.json?v=1752740016
200 OK 1.1 kB URL GET safwee.mailax889.com/hall/api/active/tasks/pop_newcomerBenefit/currency/VND/language/vi.json?v=1752740016
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
File type ASCII text, with very long lines (1132), with no line terminators
Hash 23a338796884125d4c8767efc9a63816
a37636f3e0658def931704f4c4d104daa656a284
39738d53cc66849d55e59fa4a26d75f78ed819d034988dae5acbb285692aa10f
GET /hall/api/active/tasks/pop_newcomerBenefit/currency/VND/language/vi.json?v=1752740016 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json
content-length: 921
set-cookie: acw_tc=2ff6309717527440171261840ee61fd02bdb0747cfd731d3bc140f46d3;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440171261840ee61fd02bdb0747cfd731d3bc140f46d3;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:11:29 GMT
x-oss-request-id: 6878BE411E3C92E64D72AEF0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, HEAD, PUT
access-control-expose-headers: Etag
access-control-max-age: 200
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: s-maxage=600,max-age=0,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
vary: Accept-Encoding, Origin
last-modified: Thu, 17 Jul 2025 08:13:36 GMT
x-oss-hash-crc64ecma: 17609996472344041334
content-md5: I6M4eWiEEl1Mh2fvyaY4Fg==
x-oss-server-time: 1
content-encoding: gzip
via: cache3.l2fr1[0,0,200-0,H], cache27.l2fr1[1,0], ens-cache6.nl3[22,22,200-0,M], ens-cache3.nl3[24,0]
age: 528
ali-swift-global-savetime: 1752743489
x-cache: MISS TCP_MISS dirn:11:276105586
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 72
timing-allow-origin: *
eagleid: 2ff6309717527440171261840e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/SportChunk.DGVOSkv-.js
200 OK 60 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/SportChunk.DGVOSkv-.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (58916)
Hash 52a1cb05a30452b7331427872463f25c
78d986776f7c939af88ae73d136580b4c46b4da1
ffdd8595498f771321de261120b5dfe7c5bd881bd165f2d93839b8ee496dab7a
GET /assets/themes/SportChunk.DGVOSkv-.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/OutrightIndex.BrseC3ao.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4313
date: Thu, 17 Jul 2025 08:08:25 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-ea28"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iAAtHSuwSMcZQ2pezxGEafM1yEQV4dgrp48HGM6kaooKGunH9np0Lg==
GET safwee.mailax889.com/game_pictures/p/1889/CL/hot/1012/4/custom_VND.avif?web_v=v6.2.95
200 OK 10 kB URL GET safwee.mailax889.com/game_pictures/p/1889/CL/hot/1012/4/custom_VND.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 400ad4d2fa43c01ab53a2ec32fce4b4a
9122583d11a88283e7ca87ee4822f0d1549e00f5
905c2dbec73e707d347cd45388524bcb096facac3680a3f181b3c09b70ceefb1
GET /game_pictures/p/1889/CL/hot/1012/4/custom_VND.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 10474
set-cookie: acw_tc=2ff6309717527440114308972ea6f9d517478990b2a34d81a8491294b1;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440114308972ea6f9d517478990b2a34d81a8491294b1;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F048FEFEBFC28B43A
vary: Origin
accept-ranges: bytes
etag: "400AD4D2FA43C01AB53A2EC32FCE4B4A"
last-modified: Wed, 16 Jul 2025 12:09:14 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12486157183707128988
x-oss-storage-class: Standard
cache-control: public,s-maxage=86400,max-age=2592000,stale-while-revalidate=86400,immutable,proxy-revalidate
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: QArU0vpDwBq1Oi7DL85LSg==
x-oss-server-time: 16
via: cache8.l2fr1[0,0,200-0,H], cache36.l2fr1[0,0], ens-cache7.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6316
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:12:150066198
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 82729
timing-allow-origin: *
eagleid: 2ff6309717527440114308972e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/bewcdn.txt?1752744016704
200 OK 2 B URL GET d3mnhu2agy852k.cloudfront.net/bewcdn.txt?1752744016704
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /bewcdn.txt?1752744016704 HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
DNT: 1
Connection: keep-alive
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/plain
content-length: 2
alt-svc: h3=":443"; ma=86400
date: Thu, 17 Jul 2025 09:20:17 GMT
access-control-allow-credentials: true
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
x-cache: Miss from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: OT993mag0iuhiEB-qmFxGS9IFxdBj-D8jlb3Ep6ueYaeQQUb-g3dqQ==
POST fvsdt.ax88aa.top/hall/api/statistics/domain/pointer
200 OK 50 B URL POST fvsdt.ax88aa.top/hall/api/statistics/domain/pointer
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.ax88aa.top
Fingerprint22:8D:53:38:AE:AE:CF:90:CD:7F:56:37:BB:00:FD:91:D2:2B:73:EE
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 8ff13fc6aaee7486690c3d8797ea0950
7cb2b94d48c09eb6774ee4e048e71e46ec2f86e3
e14958887a71f1276e8bb189b09f7d0bcfefdf75b074cffb205f2a08b0ef2e5e
POST /hall/api/statistics/domain/pointer HTTP/1.1
Host: fvsdt.ax88aa.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: vi
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
x-object-id: {"uid":"","browserLanguage":"en-US","init":{"device":"","created":1752744008113,"version":1752667351000}}
platformType: 5
devicetype: 3
x-device: 1-5
x-data-mode: plain
x-request-id: 06f6e4d3-b263-434e-9cab-1fec3c5e6c79
device: 8f89dae3-1a57-4f86-bf7d-e6eea88a14de
currency: VND
timestamp: 1752744015
nonce: 06f6e4d3-b263-434e-9cab-1fec3c5e6c79
sign: +GHKDMhoyy6rg96EAApVEFnOs5WYsf6KqKgF/fMB7xknHOhfwXUaU9JNGkFn6Xlu
siteCode: 1889
language: vi
token: b2e3d672-9d88-47a7-81b4-9d7ffc62054f
auth: undefined
deviceModel: Firefox v134.0
physicalDeviceModel: unknown
operatingSystem: Windows
deviceBrand: unknown
browserType: Firefox v134.0
appSystem: Windows 10
domain: d3mnhu2agy852k.cloudfront.net
webauthnDomain: d3mnhu2agy852k.cloudfront.net
clienttimezone: 0
x-custom-referer: https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
x-version: 6.2.95
browserfingerid:
appVersion: v6.2.95
Content-Length: 81
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/json; charset=utf-8
content-length: 50
set-cookie: acw_tc=2ff630a017527440173421529e8327fab2ffe70b5f42cf0f8401382c91;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff630a017527440173421529e8327fab2ffe70b5f42cf0f8401382c91;path=/;HttpOnly;Max-Age=3600
acw_tc=0a0ccab017527440174261387e5956ae0767a54a099e7c9e07bed69abcfeed;path=/;HttpOnly;Max-Age=1800
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 09:20:17 GMT
api-cache: false
cache-control: no-cache
x-env-go-biz-gateway: 0
x-env-go-biz-statistics-server: 0
x-server-version: 4.0.0
x-trace-id: 640374e67b3508a0
access-control-allow-methods: *
access-control-max-age: 3600
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: X-Trace-ID, newjwt, token
via: cache17.l2fr1[248,247,200-0,M], cache17.l2fr1[248,0], ens-cache12.nl3[270,270,200-0,M], ens-cache12.nl3[272,0]
ali-swift-global-savetime: 1752744017
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:17 GMT
x-swift-cachetime: 0
timing-allow-origin: *
eagleid: 2ff630a017527440173421529e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/home/cjc1_style_1_font_sprite.avif?manualVersion=1&version=v6.2.95
200 OK 10 kB URL GET safwee.mailax889.com/siteadmin/skin/lobby_asset/common/web/home/cjc1_style_1_font_sprite.avif?manualVersion=1&version=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 97d06fffed0e1577332311a811eb934a
420f18d6576a9556fa53442675fef7bedca037bc
06ef7c2bdfae64000a86a6ffdcea4287c7177a6fdd337ae7b07ac3d8facd184c
GET /siteadmin/skin/lobby_asset/common/web/home/cjc1_style_1_font_sprite.avif?manualVersion=1&version=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 10064
set-cookie: acw_tc=2ff6309717527440108227914ea012897e02cde731372951f3a0840cb1;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440108227914ea012897e02cde731372951f3a0840cb1;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:34:55 GMT
x-oss-request-id: 6878A79F594307992E427671
vary: Origin
accept-ranges: bytes
etag: "97D06FFFED0E1577332311A811EB934A"
last-modified: Tue, 15 Jul 2025 11:59:58 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15356152153699986960
x-oss-storage-class: Standard
cache-control: max-age=604800,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: l9Bv/+0OFXczIxGoEeuTSg==
x-oss-server-time: 4
via: cache24.l2fr1[0,0,200-0,H], cache11.l2fr1[1,0], ens-cache4.nl3[0,0,200-0,H], ens-cache3.nl3[4,0]
age: 6315
ali-swift-global-savetime: 1752737695
x-cache: HIT TCP_HIT dirn:11:691470571
x-swift-savetime: Thu, 17 Jul 2025 08:36:05 GMT
x-swift-cachetime: 601130
timing-allow-origin: *
eagleid: 2ff6309717527440108227914e
X-Firefox-Spdy: h2
GET safwee.mailax889.com/game_pictures/g/CL/312/11/312001/default.avif?web_v=v6.2.95
200 OK 3.9 kB URL GET safwee.mailax889.com/game_pictures/g/CL/312/11/312001/default.avif?web_v=v6.2.95
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subject*.mailax889.com
FingerprintE7:EB:6F:EB:E9:FF:FA:AB:BB:84:F1:97:3F:C6:95:9D:78:23:2F:D7
ValidityTue, 20 May 2025 00:00:00 GMT - Mon, 18 Aug 2025 23:59:59 GMT
Hash 351bb11adbcc1539f1a9a592edb1ebb1
27fc0bb97011cfadf4b3ee46af23482de70b6238
40df89334f14a57f645e06e665d93f613f26baee1f75c2a777d9811a5db61d1b
GET /game_pictures/g/CL/312/11/312001/default.avif?web_v=v6.2.95 HTTP/1.1
Host: safwee.mailax889.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/avif
content-length: 3870
set-cookie: acw_tc=2ff6309717527440116211297e1f4ea807bfa5ac609c516676911f4893;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309717527440116211297e1f4ea807bfa5ac609c516676911f4893;path=/;HttpOnly;Max-Age=3600
strict-transport-security: max-age=5184000
date: Thu, 17 Jul 2025 07:35:04 GMT
x-oss-request-id: 6878A7A840D002799320EDC5
vary: Origin
accept-ranges: bytes
etag: "351BB11ADBCC1539F1A9A592EDB1EBB1"
last-modified: Wed, 16 Jul 2025 11:20:20 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9194756908080821908
x-oss-storage-class: Standard
cache-control: max-age=2678400,stale-while-revalidate=86400,immutable,proxy-revalidate,public
x-oss-ec: 0048-00000110
x-oss-force-download: true
content-md5: NRuxGtvMFTnxqaWS7bHrsQ==
x-oss-server-time: 3
via: cache24.l2fr1[0,0,200-0,H], cache12.l2fr1[1,0], ens-cache1.nl3[0,0,200-0,H], ens-cache3.nl3[1,0]
age: 6307
ali-swift-global-savetime: 1752737704
x-cache: HIT TCP_HIT dirn:12:549879167
x-swift-savetime: Thu, 17 Jul 2025 08:36:06 GMT
x-swift-cachetime: 2674738
timing-allow-origin: *
eagleid: 2ff6309717527440116211297e
X-Firefox-Spdy: h2
GET cfuibdsd3g.wggos.com/agespeed.txt?1752744011609
200 OK 2 B URL GET cfuibdsd3g.wggos.com/agespeed.txt?1752744011609
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerZeroSSL
Subjectcfuibdsd3g.wggos.com
FingerprintFC:F9:44:73:55:B4:94:A3:D3:67:B0:26:10:CD:33:FD:7E:1D:8D:FE
ValidityWed, 28 May 2025 00:00:00 GMT - Tue, 26 Aug 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
GET /agespeed.txt?1752744011609 HTTP/1.1
Host: cfuibdsd3g.wggos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d3mnhu2agy852k.cloudfront.net/
Origin: https://d3mnhu2agy852k.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: text/plain
content-length: 2
set-cookie: acw_tc=2ff6309f17527440119383419e1e6a54e5cdb7dc498b12ae0180bd6a03;path=/;HttpOnly;Max-Age=3600
cdn_sec_tc=2ff6309f17527440119383419e1e6a54e5cdb7dc498b12ae0180bd6a03;path=/;HttpOnly;Max-Age=3600
acw_tc=0a094e3817527440122994433e41e3e6a806d57254c9d93952c9064b96885b;path=/;HttpOnly;Max-Age=1800
strict-transport-security: max-age=5184000; includeSubDomains
date: Thu, 17 Jul 2025 09:20:12 GMT
cache-control: s-maxage=315360000,max-age=0,public
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-credentials: true
via: cache39.l2fr1[470,469,200-0,M], cache5.l2fr1[472,0], ens-cache12.nl3[536,536,200-0,M], ens-cache11.nl3[538,0]
ali-swift-global-savetime: 1752744012
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 17 Jul 2025 09:20:12 GMT
x-swift-cachetime: 2592000
timing-allow-origin: *
eagleid: 2ff6309f17527440119383419e
X-Firefox-Spdy: h2
GET d3mnhu2agy852k.cloudfront.net/assets/themes/3_WithdrawSubDialogsChunk.BGXI5TdT.js
200 OK 3.7 kB URL GET d3mnhu2agy852k.cloudfront.net/assets/themes/3_WithdrawSubDialogsChunk.BGXI5TdT.js
IP
Requested by https://d3mnhu2agy852k.cloudfront.net/?adjust_referrer=adjust_reftag=cvobfri1pogEW&cid=1089047
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type Java source, ASCII text, with very long lines (3654)
Hash ee3718d7c2b375e7ca55a32408dfef70
972291de89149b0f0f67020cdb8a1aa9bf92c22b
de5f250cbf66293da95f962130de0cfddc0f6c583522f5a7f65189465533e6b6
GET /assets/themes/3_WithdrawSubDialogsChunk.BGXI5TdT.js HTTP/1.1
Host: d3mnhu2agy852k.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d3mnhu2agy852k.cloudfront.net/assets/themes/BettingTaskIndex.58K1tkR0.js
Cookie: acw_tc=0a0ccab817527440064936975e43a368fcd23bb865f4883b2dbca351e37191; web__lobby__persisted__device=%7B%22uuid%22%3A%228f89dae3-1a57-4f86-bf7d-e6eea88a14de%22%7D; web__lobby__persisted__user=%7B%22userInfos%22%3A%7B%22game_gold%22%3A2000%2C%22account_type%22%3A1%2C%22platfromid%22%3A%22web_lobby_guest_account%22%2C%22mode%22%3A0%2C%22currency%22%3A%22VND%22%7D%7D; _ga_2V9RR8N0JM=GS2.1.s1752744016$o1$g0$t1752744017$j59$l0$h0; _ga=GA1.1.632818464.1752744017
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript
alt-svc: h3=":443"; ma=86400
age: 4312
date: Thu, 17 Jul 2025 08:08:28 GMT
cache-control: max-age=315360000
content-encoding: br
last-modified: Wed, 16 Jul 2025 13:10:33 GMT
etag: W/"6877a4c9-e86"
expires: Thu, 31 Dec 2037 23:55:55 GMT
vary: Accept-Encoding,Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oVMNF4qE1B3rcYJ9s0uOhEvHdaTa7yuRGzHzOKJVsGvekDMkbc8WGw==
54.230.245.39
47.254.188.2
47.246.48.186
104.18.7.145
0.0.0.0