{"report_id":"08f53754-d128-4b6b-b743-636c190904a9","version":6,"status":"done","tags":[],"date":"2026-03-18T17:47:26Z","url":{"schema":"https","addr":"nhacaiut.com/","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nhacaiut.com/","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"title":"Nhà Cái Uy Tín - Cập Nhật Top 10 Nhà Cái Uy Tín","dom":{"size":99780,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32803)","md5":"4b54fa702d7e4ae6ff58d13d4cd04beb","sha1":"e69f684d34ec10b232b50f6208b944242cd8b19d","sha256":"51261240564686c0c920e4c43ec8a0b32757b99d680d2b793329080e2d8e145d","sha512":"acc7f90981b1209ca96bf60d058fe7b9e281ddaf22361ed236b61b03f2ca3f099c3f3ae09cd31e07dc7790f2a477a0d06d1238e8d3f17df683e2f38645e860fd","ssdeep":"3072:up286ulAdNvjrLDVxLDO3ukMruBNSI+8h/WSr:6PavjrLDVxLDO3ukMruBNSIfh/z","tlshash":"5ba3c733a08978275a5b86d8d1f5f71ee383d54ade038686f2f4c2a99fd1ca2797110c","dom_hash":"domhash18eb696239ab2103c4c4f4c5fff131e0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nhacaiut.com/","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-22T17:47:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"nhacaiut.com","ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":50,"received_data":2114091,"sent_data":23459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"s1.what-on.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-06-13","domain_rank":1474137,"first_seen":"2023-03-20T02:40:30Z","last_seen":"2026-03-14T04:39:45.838682Z","alert_count":0,"request_count":1,"received_data":42052,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-03-16T02:15:13.050294Z","alert_count":0,"request_count":2,"received_data":2439,"sent_data":904,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-03-15T23:23:31.668018Z","alert_count":0,"request_count":1,"received_data":90487,"sent_data":441,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nhacaiut.com/","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"336b4b067dcb50351d5e2d7c92cf1631","sha1":"9709109f27eaad0c5a1e50facc142f8f197a11b6","sha256":"ef2f7f28db32250196ae2c8242611a7f7159c2a539dabd40b82071b1c07561c6","sha512":"43c83e5907dbc25a8620884fadba33a679e0668095a659e79e711c8b6d6331d778849aab0f19bef0131cfd5537e462f2ca238dc9134732ec6867ddd945ff5676","ssdeep":"","tlshash":"d3b012343c25b42d192b300c31df53643c3a4140fa016940d07e78441433f550b01f8c","size":102,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-06-13T16:14:35.253919Z","times_seen":44045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-includes/js/wp-emoji-release.min.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-06-13T16:50:22.075564Z","times_seen":208513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s1.what-on.com/widget/service-v3.js?key=FXmMZQ","fqdn":"s1.what-on.com","domain":"what-on.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8eab1709f919e8642036dfd14a549e13","sha1":"5bbab3a91ff51c223bee8af7f1d5ae98eec5073f","sha256":"8a061717f9bfb519439d6ecef1cda60f441a608ed4de88e64c8bf2069f7e0d5d","sha512":"b77cebffd98668166228893b1f86aa39fb4b0047a61798e9abac89ded7a635ad9832e4cbc143c87de41f41e5ae9f54054c1f89c264c273160beda8ac2ada3223","ssdeep":"768:PzIkzIdw8CcU5Q1Voz8vVT8gEF8T6x9s9S9ectyEf8RGiAb+dR:7IYIjCcU5Q1Voz8vVTRoW0jtyEf+","tlshash":"47036ed3ff5c0027806cd1a9a8ae71cc7cfc5132550ca8a6be6d983c2ad0d5dd16a9f5","size":41130,"data":"","first_seen":"2026-03-18T17:47:32.929029Z","last_seen":"2026-03-18T17:47:32.929029Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df89ac8a4edec6f27487675cf257ba74","sha1":"73268bdbd1ffbed624177453022f979585632445","sha256":"61c32b773eef83834d1d6c08e0b816e9e2f1dcdee9b57548cb8048c3fb4434f6","sha512":"2dd59f3b1c6f88a479c2177e08253c3a8f727f402463c8775b915dd9bad7b97467a8287090b28d2acb2c64b599252ce892c47db7396d74e70a290eb0a30ac1fc","ssdeep":"","tlshash":"b461979a3775348b32b604d26a2f4e07eb7248361a889034cab9a7541cb1463d37ae4a","size":3396,"data":"","first_seen":"2026-03-18T17:47:33.034735Z","last_seen":"2026-03-18T19:14:19.323479Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/plugins/foxtool/link/index.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8c0177bbf8b82bfc3f74ba9a9a5c4e7","sha1":"1642d3bbae803b2003799a82b1722d5d172574f4","sha256":"0f0e2d75c83c3c627314feca368bdd9353a2bd18c3a1987edfd40b557787d146","sha512":"0d6ffdc8911bb364a42f7beb3797c68d01f280c970ef17afa9676edf597234d50bdce929c420b2b7281ea8ae3d16b4f9788ba0156476baeea68a85296c4fe77a","ssdeep":"","tlshash":"0e21eeee400073f076b2bbb9ce669b46f8b410330243aa117c1cc194af78d651271ed4","size":1303,"data":"","first_seen":"2025-03-26T01:42:59.479053Z","last_seen":"2026-06-12T10:07:40.9708Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T17:33:46.023529Z","times_seen":368207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-includes/js/jquery/jquery.min.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-13T17:33:36.774813Z","times_seen":904814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-includes/js/hoverIntent.min.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-06-13T17:33:29.252184Z","times_seen":79264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/themes/flatsome/assets/js/flatsome.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4255cbc3ddf1c27dacbd4860b3782c3","sha1":"fa17cf43be7ad4814efc774f8f9d8a6a9a5c8221","sha256":"10d17b852c0a0ab3de4638a2b0fcaee7ed4632a04fb126d388e871bffd0d0854","sha512":"e1dd1119f545c4c2ff24eb34ea1c0ec902abfab92b35abfe75a382ab7af5c065b88ad021b7a0d57ca31a839588e1fa4d485bfd3c59011c34d0057ac94b66cfbb","ssdeep":"1536:IfDJqH5NQ8kNSqcp1U8EtmoYrNqK7kSBed3ZRm:MoxjUvkesedy","tlshash":"1133e728729070fd01ff61a7f13fa32432376565b0064054b53d98fa2d6ad5e26a3fba","size":52859,"data":"","first_seen":"2024-07-13T11:25:57Z","last_seen":"2026-06-13T11:26:28.236815Z","times_seen":4683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/plugins/foxtool/link/smooth-scroll.min.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bad2856ce76222a84cebb1d4d4f3dd3c","sha1":"02946dae87f924a055f7b00415dc9ea93787f54b","sha256":"e098af44cf74877d4735281b5f9fd4e7107e54e6ac1cfee14e280c8bdeac0b17","sha512":"81249d9af415698c037ff0e9451cca3a114e78bc51bd3efc1b650b864958fdcfc98b5ab5db3b1b0cdafee3ea78d1bd4bdee06cf66ae1545f9333965b21eb8bae","ssdeep":"192:eRG/+3I4SuUnW6ufSo/AzevV4Rxa5EZMfpXYXuNYx8GP:eRG/+3I7dnto8evVP5EZMfpoXuNYx8GP","tlshash":"aaf1caed7a42a0b2819e017bb2af834572315115705b1824a329ccc87ce4ef7936bedd","size":7904,"data":"","first_seen":"2024-05-03T16:04:27Z","last_seen":"2026-06-12T10:07:40.957581Z","times_seen":188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/plugins/foxtool/link/lazysizes.min.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45bacd312d5098b4b59f563d8756c15d","sha1":"fa55e2cff078381e5365d95782a95a787d0b7192","sha256":"3d9120fa621da6d613c1698b7014ec6bdf4620366e8f2b7b547059f4b6f6272b","sha512":"ab9f37a692ab09173b3793b49f69f352227eb2e52fec4b752467a5b386d739a30541c6a63e4f478dd5249d9bae16304db3bb6c32e69d81ee64f51cdd98efb519","ssdeep":"192:HIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:H2kNdcC9J6co91qwLcI6KgkixbdjqBFH","tlshash":"b0f1b59f755570b3aadb74b5416f310f673279339d86e092e2bac080493c84aa323f2d","size":7889,"data":"","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-06-13T16:52:40.603966Z","times_seen":13908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe28432f39d383868c62b57694cca31d","sha1":"9a4f0059402dc74350bf6451477903840b9553a5","sha256":"4c1f3df3646c27bf2afe2e6ebe2a6fc0e3d3cc19bbebb265f205efd0e55f9136","sha512":"1c1a796fb8ff64e997684e28b5d4fc2242f0f96b768ade282a70fcf58a6179a8590c825fdec38d15f8783d33fc270142576e283704cd159f0b87cf1e849776c9","ssdeep":"384:Pj1yd4Sk6FCT6IZ9bAstA3fVipSfUeGebT+u:70iSk2RIZ9MsmNq+p","tlshash":"bb72c904b2412272d39b60adc89b450e69bb7a1a3c05289c762ec9c58f74f0c70ffbb5","size":16237,"data":"","first_seen":"2023-03-07T16:33:47Z","last_seen":"2026-06-13T16:04:23.952343Z","times_seen":12765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-13T17:20:17.947697Z","times_seen":480964,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85ac95dfd2747770cf7aff263e53ea95","sha1":"03e757e50ab8bda5c362a535db49d5016b68ee50","sha256":"b894789048002239f3ca0cd60b1475eadc8944a7b64d970cfa64c8ebaf6284ed","sha512":"e9ef89c3eff9767f997e7c678290f9b6f7d061ecce1d2032142a121672bf65ffea27168555c8c0bdcf1db90a91d7a9bb67887a7b6fef03a00457ffd72cfc40ff","ssdeep":"","tlshash":"e6d0222cb0bd0448e8b331d22cbaa20c1dc7b0aefa099080424ebe11cec98f1208a40f","size":207,"data":"","first_seen":"2025-11-09T00:15:40.843894Z","last_seen":"2026-03-18T19:14:19.324149Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/plugins/foxtool/link/instantpage.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3041001cb5a94c9f30dd5d8d33802ac","sha1":"1a00966fe7fe4a056db276d4ecf1d4372d28659a","sha256":"0d0ee7a16ae3c3063d7644963128afd917c75e9aab66dc4582966b6e5aaeaf6c","sha512":"5c778ee619bb9879505b1908b317217f448be6d7e599df66913f99d1039170905b36c2355a27276afc4f7cae19b55739777b040414d6472c7f21ec99148dd261","ssdeep":"","tlshash":"dc5122d9e20121fa01f656b262bba340b53a11443017a0221c3e9dd95e7ffda61a3e9f","size":2875,"data":"","first_seen":"2023-03-07T13:09:28Z","last_seen":"2026-06-12T10:07:41.003705Z","times_seen":668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5bb57df73421586bf3d822400b6b5008","sha1":"d29bf6f2ecfa6e1b8ea7d5d3b2f0217b1e5996cb","sha256":"97fa6176b7d23fb312eecdb12f34a800c12f6b2052550ebca6b46d3b33f73aa2","sha512":"9c33c503a97338fa64d9b937d1d23f99752f12b12fc93800050b4cfa7428c80a0b48f4681c9f58b678e0cb25779fca9249b96cf6c242f6e481376613b7c1a2eb","ssdeep":"","tlshash":"d721fe79332eb16d91c6c0c69b64bfe19b1a36362840b500e6eec47a119396c72fe516","size":1232,"data":"","first_seen":"2026-03-18T17:47:33.039452Z","last_seen":"2026-03-18T19:14:19.329735Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nhacaiut.com/wp-includes/js/hoverIntent.min.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"5db-67a48e8e-434764;br\"\r\nlast-modified: Thu, 06 Feb 2025 10:27:26 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 669\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 4100\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hR6CkT3Ei6A1wThLxLA2btpoQ93bfc%2B%2FVGcboOTcjH0zC4cEue3vUBRgc6Owv8ygl3QGp32BCep2vEwgtHA3d8GLW9nwLLHUumfQdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7e38cbfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-06-13T17:33:29.252184Z","times_seen":79264,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/cropped-LOGO-NHA-CAI-UT-512-32x32.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:06.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-LOGO-NHA-CAI-UT-512-32x32.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 05:47:06 GMT\r\netag: \"326-68998b5b-434ef9;;;\"\r\nlast-modified: Mon, 11 Aug 2025 06:19:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 806\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQWs3cbeukJ5P7j2XJ7AZ0FlN5u1FEnm1yRaGnQpkSZ5npwqmvwJEaPMnwPcvvK0W9e7k3RVA0De5l4ihpp72IoT4nwHuYG1eEs92g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f853b75fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d31f84e850e002daf85058dbbb9c568","sha1":"eab4f6e8e1c309ac4c5670c7a37bcec382363632","sha256":"5e21abc3a6022f936af53e48b7bc8a0b73e0b36e3d60531a0466792bc485ea06","sha512":"190fe945fddeaee659fe44fabef4eadeb3be5b8d07f3c2f60eb4e7b0dd1288f2ff0763abe18110d7a77d2e7e7f147210b73bfe4648063a7c6ab76a252169166b","ssdeep":"","tlshash":"0a0181abce20e160c8046cde89127020ae3a14c7dbea8b2070cc4281608f2de3eb803c","first_seen":"2026-03-18T17:47:32.913945Z","last_seen":"2026-03-18T19:14:19.313409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/plugins/foxtool/link/index.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/plugins/foxtool/link/index.js HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"517-6895cec5-4343e8;br\"\r\nlast-modified: Fri, 08 Aug 2025 10:17:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 460\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 4101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dIa0AeLX%2B35OO7%2BzmjUVHaStNYm1RGhBr0EODES4GWwCiXaO7vDEoTyM7fLNPSMyFvFUDL3uCNrTZrxaNu08PcDBAnamH2oivW5D4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7d8883fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1303,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"d8c0177bbf8b82bfc3f74ba9a9a5c4e7","sha1":"1642d3bbae803b2003799a82b1722d5d172574f4","sha256":"0f0e2d75c83c3c627314feca368bdd9353a2bd18c3a1987edfd40b557787d146","sha512":"0d6ffdc8911bb364a42f7beb3797c68d01f280c970ef17afa9676edf597234d50bdce929c420b2b7281ea8ae3d16b4f9788ba0156476baeea68a85296c4fe77a","ssdeep":"","tlshash":"0e21eeee400073f076b2bbb9ce669b46f8b410330243aa117c1cc194af78d651271ed4","first_seen":"2025-03-26T01:42:59.479053Z","last_seen":"2026-06-12T10:07:40.9708Z","times_seen":280,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/8S-bet.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/8S-bet.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"350e-68aac112-42f4e6;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:36:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13582\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KFYWwhafxe49%2F%2BFWdG4i5%2B0Tbp1J39ccFpDaV0www%2B78WBWq6jHJv1ltBLL2%2F5rihg%2F7q5NqcNGHHNGEJlmNnOubj9mw7Ruhi%2B9MA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7dc899fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13582,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f787efa334c6910829b50ec0bb0c24ef","sha1":"0e4451fcaa8acda763e4c821d6613b3d8ce8ac0f","sha256":"0525fa499028385bd8f0a93e92f769d4be366ba9fdde0655bbc6dc6e169c5633","sha512":"c6e77609f463baa089b85b17545f5845790e385bbef48b541c0314d62d99f6481863a891a3a471a14a0ee9dd698c77c245618d1ea51751729ee61508f6d45d22","ssdeep":"192:ivHsZjYe/ucIJJjyPjGyBwbl7dxwFhPwr5HlPvQzbPJanLILQHcJUiSSC+qjG3AE:iEZji7jqjbebl7dI7zbs5atSR+qjGvem","tlshash":"3452d081993984d349b25ce29a740cdcc209aeffe3743987db11f442e8de593e095087","first_seen":"2026-03-18T17:47:32.925681Z","last_seen":"2026-03-18T19:14:19.321553Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/vz99.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/vz99.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"3bca-68aabef2-43321e;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15306\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exudlTq2GbdchJGEu6JXIrgsLh6kavwoexY%2Bx3MWgIVkMOUEOZVbedk5jQ3aZYahZrpn7z6gVlfPoU%2BpIjpU6j%2ByO6URxIxBKIwHpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7dd8a3fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15306,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c2b086b3c396045af8b7d0707592738","sha1":"49ad662d4bffbf7e50362932bcccf47953ed4d65","sha256":"ceff4f095bcd38b4b33355aa627994f2fcd365af16fe1efde03a56e38fb2b648","sha512":"7280835392e61efd17fcdad4ed6270f966c20105c402794669db9742d564cd300781583a30e24877c59f4235985842deef70ffdf21fb694160a6535165048b7a","ssdeep":"384:JKGas0VIsVUb+f9PO5pBu0NCEVVQUOiBRQKXpwJV/Wd:lR0GsVt0f86d8U5BRQvWd","tlshash":"3c62e1a28a14d89325eeefb46731b8f4680388f93407542bf0d897c8f99f152d39854e","first_seen":"2026-03-18T17:47:32.927812Z","last_seen":"2026-03-18T19:14:19.309089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s1.what-on.com/widget/service-v3.js?key=FXmMZQ","fqdn":"s1.what-on.com","domain":"what-on.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"what-on.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 15:07:41 GMT","end":"Mon, 25 May 2026 16:06:14 GMT"},"fingerprint":{"sha1":"D2:B7:3D:AF:45:FF:20:43:4B:86:28:4A:81:1B:59:D8:10:FB:EF:42","sha256":"D9:F2:F9:2B:C4:1B:81:46:8A:73:CE:EA:83:DE:11:A2:21:63:49:2A:2E:CA:6E:E5:93:6B:FA:1E:19:55:70:99"}}},"request":{"raw":"GET /widget/service-v3.js?key=FXmMZQ HTTP/1.1\r\nHost: s1.what-on.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 17:47:06 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: device_info=%7B%22is_wireless_device%22%3A%22false%22%7D; expires=Wed, 18-Mar-2026 18:47:05 GMT; Max-Age=3600; path=/\r\nserver: cloudflare\r\nx-content-type-options: \"nosniff\" always\r\nx-xss-protection: \"1; mode=block\" always\r\nstrict-transport-security: \"max-age=31536000; includeSubDomains; preload\" always\r\nreferrer-policy: no-referrer-when-downgrade\r\nhostvn-cache: BYPASS\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgRaWX0K70CGYdQ4PhXU9pCKlfsirEs9Maxxm9Wbrv8sHwixe1dK4zy0h52KLSZWoDvNNeoZUVezSFZY9xvsP6fbnOdG0sTbknYiVbe6\"}]}\r\ncf-ray: 9de60f7e4a7856f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41130,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2624)","md5":"8eab1709f919e8642036dfd14a549e13","sha1":"5bbab3a91ff51c223bee8af7f1d5ae98eec5073f","sha256":"8a061717f9bfb519439d6ecef1cda60f441a608ed4de88e64c8bf2069f7e0d5d","sha512":"b77cebffd98668166228893b1f86aa39fb4b0047a61798e9abac89ded7a635ad9832e4cbc143c87de41f41e5ae9f54054c1f89c264c273160beda8ac2ada3223","ssdeep":"768:PzIkzIdw8CcU5Q1Voz8vVT8gEF8T6x9s9S9ectyEf8RGiAb+dR:7IYIjCcU5Q1Voz8vVTRoW0jtyEf+","tlshash":"47036ed3ff5c0027806cd1a9a8ae71cc7cfc5132550ca8a6be6d983c2ad0d5dd16a9f5","first_seen":"2026-03-18T17:47:32.929029Z","last_seen":"2026-03-18T17:47:32.929029Z","times_seen":1,"resource_available":true,"data":null}},"time_used":902,"timings":{"blocked":49,"dns":24,"connect":10,"send":0,"wait":759,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/giay-chung-nhan-cong-bang.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/giay-chung-nhan-cong-bang.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"10392-68a440ea-436073;;;\"\r\nlast-modified: Tue, 19 Aug 2025 09:16:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66450\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WDW2OK102hRBXKs5J38pGHNLH8P%2FkrE48BbHERLkajjG97dgF%2F%2BzjX9KahknJF4AFsabHMFLwymqJtYk6W4exafg1dQM2hnwvTRPcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7de8acfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":66450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"726b6f23325abb8680c338d380324743","sha1":"9f024170e72aa9984f1cebeec14ac51e35d52c14","sha256":"90901b936bbee4b359f3e111e99e2c30fa66258758d5bab153bff8c475999d0c","sha512":"ef5809255792a8c2dbabeba3c8999b7581d639a964d78054091c6f3d25719f00f2a1e80e1fd5a598fe8c35db359dcc9d41d58cc75d2bef36958208c5f0e808a2","ssdeep":"1536:gDpK2/uz4uX9phNdN4NPkrNeNcNCNANGN0vVLd1guJS7GBPaR7A66ZtGRNhN4NaF:DcuUu7hNdN4NPkrNeNcNCNANGN0vVLrm","tlshash":"0a53d0915901dc2dcfbb72367adf62491f7a42f6f21a0b07445f8ef09bfa5106b48168","first_seen":"2026-03-18T17:47:32.930236Z","last_seen":"2026-03-18T19:14:19.30971Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/plugins/foxtool/link/lazysizes.min.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/plugins/foxtool/link/lazysizes.min.js HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"1ed1-6895cec5-4343dd;br\"\r\nlast-modified: Fri, 08 Aug 2025 10:17:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3365\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 4100\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4J6n%2F7PrfTl3SZWb78dTOlrqUySBEe%2FlPM9UwBB4PTbyzvqMV0i5Tc4o%2Flm9R%2BybnNiXyGN0NdH3l8u7d23b11enOgF3JPmZ0hY1zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7e28c2fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7889,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"45bacd312d5098b4b59f563d8756c15d","sha1":"fa55e2cff078381e5365d95782a95a787d0b7192","sha256":"3d9120fa621da6d613c1698b7014ec6bdf4620366e8f2b7b547059f4b6f6272b","sha512":"ab9f37a692ab09173b3793b49f69f352227eb2e52fec4b752467a5b386d739a30541c6a63e4f478dd5249d9bae16304db3bb6c32e69d81ee64f51cdd98efb519","ssdeep":"192:HIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:H2kNdcC9J6co91qwLcI6KgkixbdjqBFH","tlshash":"b0f1b59f755570b3aadb74b5416f310f673279339d86e092e2bac080493c84aa323f2d","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-06-13T16:52:40.603966Z","times_seen":13908,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2 HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 05:47:05 GMT\r\netag: \"3280-68bd79ba-12db;;;\"\r\nlast-modified: Sun, 07 Sep 2025 12:25:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 12928\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XSd29pen7cJGOKKb7%2FdDrRC32epvgxxt%2BkdtR4cnZr2ndgzQCKYyhgHtLxNe%2B9oV%2FroS7%2FaQr9w6y8eIBpiKKLNo2vy2hPADNvRxpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7f7925fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12928, version 1.0","md5":"56cdd76c4246cc056c4230a3ea79a997","sha1":"404038f1a5087fd7e1241182f717806eaa8c21e4","sha256":"26b2403f995ed65fb49037a6498c074d3ec3c36031a69fc368c4c2180e2c01fa","sha512":"ec711ac764b9da961323fc37a3253fabf2896c50fb5befe2db1f7e247f566ad1d25044127e14230e7f6ad5aeda860dbea331e7b6cd8710ec576d41fe697a35a0","ssdeep":"384:Aq6VKXCcmF/nlJ9s4dh7DFqzDBQXHTft4:cVKXq5nlJ9sChLp4","tlshash":"6c42cff99ec4a934e9980178594fbc640ab0633029ff9ee44f1028105dcb0eee677c99","first_seen":"2025-09-21T15:24:59.059993Z","last_seen":"2026-06-13T10:00:33.832042Z","times_seen":342,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/themes/flatsome-child/ctc-style.css","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/themes/flatsome-child/ctc-style.css HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 08 Aug 2025 10:12:15 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDrzkxLTILVeC8VnfmV1wNFgfPc0VwDpfXzYT0Du%2Bpj8F6B2c6afKEGpWXRywrIs6cSHbxJ6qGWVJ39FrAOk8fVdMncZ7k3d4dL%2F8g%3D%3D\"}]}\r\ncontent-encoding: br\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 4101\r\ncf-cache-status: HIT\r\netag: W/\"3c-6895cd7f-433393;;;\"\r\ncf-ray: 9de60f7d887efb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":60,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6bd8fba961868359bf5be44f7edecdd1","sha1":"4bd14a08aa7cff13a60f61b2f6a64e4ccd9a2f32","sha256":"82916d22a88b42b6580750941ddfec4f7b867d5301dd69f984fd2f7cff6689c8","sha512":"4c6dc097ea4a4081e4daac5b5cff75e85424bd7ab5a462c7d62acf1ca32666dc23f59dce21f9951e5db06a6aaf445056498a13454e99084dbc92cb6e74f0965c","ssdeep":"","tlshash":"b7a00274963e81b205955ae89925f113d846128511295182680d50a585941af1faef0d","first_seen":"2026-03-18T17:47:32.942601Z","last_seen":"2026-03-18T19:14:19.312668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/123B.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/123B.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"3d04-68aabef6-434ee5;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15620\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Qi39qAHe4AmRJLme7bVdXX3e2Cg6NnSnXiFMqidtEOTr%2B9g9e75g9Z8Xl45rGMJU305IxWj02KN0OmqKmPcz1zJ6jhqELrcJgfYuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7dd8a1fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e4ba9489a181003fd2c235f222860b51","sha1":"c81fb63500dcaa0d4ac98141a294a86f75156e50","sha256":"f310bf91d0545b1f7246a6da6012ca57a3ac3afc053a2bfac6e148c7509e432f","sha512":"2c47d31f87aec676d1c820cd6cfc1d6bcd405d35f7e7ac4662b9e5f69a9e0d9c833ade5e178c3648a49d4fb99c072e1be0866407cf08e95abf2aa73e5c4b9625","ssdeep":"384:N84lWzudMWHJsMaXjUfArX6RJXubxIXfoZ:JWziMZMaQBRlubWXg","tlshash":"6e62d188f386246a381feda1b9d641451479b0369e92dd0d592e788a13c7778f0ce873","first_seen":"2026-03-18T17:47:32.944734Z","last_seen":"2026-03-18T19:14:19.290627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2 HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 05:47:05 GMT\r\netag: \"3280-68bd79ba-12db;;;\"\r\nlast-modified: Sun, 07 Sep 2025 12:25:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 12928\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mfQHBIT3FT%2FyQaFAVewzo3TgMjETnVvPU%2FAOztD28cSWq6lLE80FYBJwvTpTZ7fd%2B%2B8BMqoRN5DCDab5svuVy8nyI4DjiJvf5Wn6hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7f892afb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12928, version 1.0","md5":"56cdd76c4246cc056c4230a3ea79a997","sha1":"404038f1a5087fd7e1241182f717806eaa8c21e4","sha256":"26b2403f995ed65fb49037a6498c074d3ec3c36031a69fc368c4c2180e2c01fa","sha512":"ec711ac764b9da961323fc37a3253fabf2896c50fb5befe2db1f7e247f566ad1d25044127e14230e7f6ad5aeda860dbea331e7b6cd8710ec576d41fe697a35a0","ssdeep":"384:Aq6VKXCcmF/nlJ9s4dh7DFqzDBQXHTft4:cVKXq5nlJ9sChLp4","tlshash":"6c42cff99ec4a934e9980178594fbc640ab0633029ff9ee44f1028105dcb0eee677c99","first_seen":"2025-09-21T15:24:59.059993Z","last_seen":"2026-06-13T10:00:33.832042Z","times_seen":342,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f449.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f449.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 May 2025 14:09:54 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":563,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"032d907ff49a63e0757cadd5f36ab216","sha1":"e6620a7b4e00326c5b527ceae7d3c62b6b243059","sha256":"41578770d740012d57be1d400db47fdba90631e27363a4877af6cc54a032ad10","sha512":"7350efd06d702d6ee9f8d86728bcfea699d7284ac5ea591fd94c3bfdf6d65d8518d64e70d0949c358e02f5b9e8d993b7bdc20df52ccf368d7a9881ca733a5baa","ssdeep":"","tlshash":"f7f020cf42a0c998a8cff7a82f2645d52b5a32f259a540d54091871d38c31852a11d21","first_seen":"2023-04-06T22:22:04Z","last_seen":"2026-06-13T15:33:50.504895Z","times_seen":3674,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":45,"dns":11,"connect":8,"send":0,"wait":10,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/themes/flatsome/assets/js/chunk.tooltips.js?ver=3.19.6","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:06.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.tooltips.js?ver=3.19.6 HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"9bb3-66e15ba4-4333af;br\"\r\nlast-modified: Wed, 11 Sep 2024 08:58:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 9684\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4102\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ssTDg3wZaksSisTbIrTlxbMFhYQmAag9duJAUmzna7DOoTCraKIFheu5xwkBISC1eMB%2FNHQEG4IYxFix%2FxoUO%2B9X6J3dvJSA%2BbRqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f86ebf5fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":39859,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (39859), with no line terminators","md5":"f0edb228c3e837a21d402e0ae2d8b9b9","sha1":"0565eb152f79d2e01fd81241f9a2dd9cae35d895","sha256":"cfe3a9b28aaa89047d6776abd1a2988dd77fce6d86553517715a7a904d3b1501","sha512":"d22c84237d15f40194986f64c2937b4627e24e6c41b18c7810b3f2fb8b989d2c705cc1407de59006cdf6bddf1204647a42eccc23621d7dc73b759f3021976c45","ssdeep":"768:1pk+gInpvUKN7K3TCPHq3U5Hs9Nn1eU6YwlKUqAacA5Ag3KEuP3UtEduE7Hhg566:Uwk3TCPe5wsdAry","tlshash":"7103769af351291246eb62fd6336370f1132812d91c380b4b17c9be91dae507b7b7a6c","first_seen":"2024-07-22T13:08:18Z","last_seen":"2026-06-07T07:16:31.708029Z","times_seen":12426,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T17:47:04.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 17:47:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://nhacaiut.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://nhacaiut.com/wp-json/wp/v2/pages/1\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://nhacaiut.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YdfF7EN3r1aOfAVOdlw7C3XSLm%2B5H8y30w090GeOZD8W8k1anCzX9lcwpbpwJ8nZgY4SD7Ypw9Oh%2FZZJlqeJrA%2FVVz9KWaZZxl0sbQ%3D%3D\"}]}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9de60f7979c7c124-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":96800,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33080)","md5":"4a67dae21db087afc68c4ae1ff4edd5d","sha1":"a45a8fa69e349ec1f2a8e3373feef2aa456f978f","sha256":"7cbba75da5e9415b633121bcef2890d37a769b155f7e55759016a143c7724428","sha512":"d6cf24cdda7d75927e66a12fa16fcf6713382fc897bd004a218e153b4314606be7a919e41e2945d2bc807a83fac8b6a8a8cb922beeb39ba6b7749b1fc8aa250d","ssdeep":"1536:xRta34J94R+3F2AC6yTK4rM9P4iJWnbk2pxWmzUc8nWOAdt:xRU34Lx4AC6yTK4rM9P4iJWnbk2pxWmF","tlshash":"ca93d6339089b8271a5b86d9d1f5fb1fe383d44ade078685b2f4c2a95fd2cb2697110c","first_seen":"2026-03-18T17:47:32.947818Z","last_seen":"2026-03-18T17:47:32.947818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":54,"dns":22,"connect":8,"send":0,"wait":391,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/FB88.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/FB88.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"2c12-68aabef7-434ee8;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11282\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cpj6L3Typc1dYMVEm9Dp5zNgd8cuTaVVsvJyS4WRK5XfHh%2FBs%2BkMhVrKCUUrWVOdKDYp9G01mcNq%2BPvVfXuHaI8CW4nQz8YD8gACGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7db890fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11282,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f75fded213e0c55a06c6e838f22f64c","sha1":"8ec3e42895f9b041fd5cff51f52da6efee8a942d","sha256":"9f0e9d92e97222c0c7b3b4b535c68d11edaebe412c2c44c0a45aa69aa4d7ab7a","sha512":"c2ef00a8c643370c4cc91970cecb6c4ee6a4fd40d2f8d578338e0b9966bd9daba9cf0ea55bca2143c0689140e561c3e000e5560d2e9e0032c29115eb353e816a","ssdeep":"192:drXL4XsnkgBzUiN39Urnk+rg0TCyNfKU7zf2iR0gkUu1j7q88NkYxtuf0EA9pB:dksdzUifQkog0GYPzfT0L9ANkYvI0xd","tlshash":"0732bf3aefc054bb7588950d6af86474709ab82da064df3f929fe3dc509a60f052348e","first_seen":"2026-03-18T17:47:32.950304Z","last_seen":"2026-03-18T19:14:19.31938Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-includes/js/wp-emoji-release.min.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"4b33-6851b9ae-4346c3;br\"\r\nlast-modified: Tue, 17 Jun 2025 18:53:34 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4724\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 4099\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4mytYuu38PmtkS3f0IW81v8NC%2BOdgITfggWgdNqvij2B2BWZ9sZ8XwYqnLs6t671pf6QgCP56%2FROn4Yp1Yrj9TRyibJnlLcz5CILQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f80d9d3fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-06-13T16:50:22.075564Z","times_seen":208513,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:06.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31017\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 17:57:47 GMT\r\nexpires: Tue, 16 Mar 2027 17:57:47 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Wed, 10 Mar 2021 14:28:09 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 172159\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89501,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-13T17:20:17.947697Z","times_seen":480964,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":132,"dns":2,"connect":21,"send":0,"wait":22,"receive":23,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/MB66.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/MB66.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"3bb6-68aabef9-434eed;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15286\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=reW61lKoO38zqwikEBfVUZBKsPG%2BZYvNX5JJpnQ95hNNitqkQcaZmW%2Be1NU%2BIAKLQpqNGBVZy7NKslzzNhKipOFR47%2BTzv7sqB5BZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7dd8a5fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15286,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca3f532a68e3c205fd2b967a3139b62e","sha1":"4767fd31baa0bf9351d4e2055b815adce82273c8","sha256":"99245e3ce1a8ddb1863873fb048eb562a171c920775baeda7e8326fbb840f791","sha512":"59c4d5640ca13a33406616dcde7fcaee9b53c595d304d5ddaf2100f21f859a87ddd902066d18e604a6b8581b414fc48e904b1d8cb48652fa17a2f903f1c7e64b","ssdeep":"384:ykxY6DkWS5w+G1Z+54IckxQ/GCHmmOuiYK9ug8jGZLG:hDLSu+DWI16nwYK9uzEq","tlshash":"7762cf0ee9f16a6db604035be0116973b482b3e1b51dfcc7404e8f49b5163b345aeb1a","first_seen":"2026-03-18T17:47:32.957006Z","last_seen":"2026-03-18T19:14:19.322328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2 HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 05:47:05 GMT\r\netag: \"11420-68bd79bb-1a2f;;;\"\r\nlast-modified: Sun, 07 Sep 2025 12:25:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 70688\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtlXibJJHqRGHndWYAXO%2BMmCBGU0S%2B1%2BWUtkeNbj6dw0LbFla0kfXdkG6y81ykRLgqOTdSzzzOo0Tu%2FuiGdRStAXYFbudNqfmQqVwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7fb940fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":70688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70688, version 1.0","md5":"d16dfe26bcd760a6382f71b7e2041ada","sha1":"a63797c1e1c137082b7a58f6ee58ccb8640ac51e","sha256":"54d9a78b7ff60b689ad9f3017ffac8547b5d871afec733f6c1c3ae36577ee504","sha512":"fda0b27187940d82d30b71bfd6b2bc6ee05949899efe6537fd0d5b415da5f3c47a5da13404efe815caf0603eb10764df9d502d6cde054fcdfd59b8793a812a03","ssdeep":"1536:WBT4W49rSUvMiCLelvLZj7uojKZDBPbxCvlzTFvi6n+LoMHM:WBT4kUfCClvrYDBEtvFv5nhH","tlshash":"a96302cd1ba667ed0da61771c8269b40358c7c4b7f2508a65dba68f653827d14cec50c","first_seen":"2025-09-12T13:44:07.974577Z","last_seen":"2026-06-13T10:00:33.824731Z","times_seen":1645,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":380,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/plugins/foxtool/link/smooth-scroll.min.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/plugins/foxtool/link/smooth-scroll.min.js HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"1ee0-6895cec5-4343de;br\"\r\nlast-modified: Fri, 08 Aug 2025 10:17:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3153\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 4101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vkm62p%2FwaYcZNi%2BQNK7D2i%2BaIt2g0rLzOpcgeWn0A1OWPiVbZZugOywBqmA5OHZ6qmSkO3QRn%2BXuiGE7mV9%2F33utWCCbn94f4LuC%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7d887ffb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7904,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7903)","md5":"bad2856ce76222a84cebb1d4d4f3dd3c","sha1":"02946dae87f924a055f7b00415dc9ea93787f54b","sha256":"e098af44cf74877d4735281b5f9fd4e7107e54e6ac1cfee14e280c8bdeac0b17","sha512":"81249d9af415698c037ff0e9451cca3a114e78bc51bd3efc1b650b864958fdcfc98b5ab5db3b1b0cdafee3ea78d1bd4bdee06cf66ae1545f9333965b21eb8bae","ssdeep":"192:eRG/+3I4SuUnW6ufSo/AzevV4Rxa5EZMfpXYXuNYx8GP:eRG/+3I7dnto8evVP5EZMfpoXuNYx8GP","tlshash":"aaf1caed7a42a0b2819e017bb2af834572315115705b1824a329ccc87ce4ef7936bedd","first_seen":"2024-05-03T16:04:27Z","last_seen":"2026-06-12T10:07:40.957581Z","times_seen":188,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/F168.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/F168.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"2586-68aabef7-434ee7;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9606\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8AZNrpT1cG8kPWkJ%2FZ3oQlX3mx5%2Fa8wW4w3DdXANjItG6HYcCpr1Hbip%2BG7Q5EWFKzZywSylXYcWJyO6AoDpb%2FJSkTPRDiua%2FdOC3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7dc89afb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9606,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d635832ceba1b95dcdbafa10d69318cf","sha1":"968ca53d427b23a96d492ad11f55c35c274dd724","sha256":"237a0885b1de55d6aefb422faccaf53ed4eb94fcd5596ecdcec8427f98becab8","sha512":"4e629c969f2018103db351bf3e54051908966eb812f22f4f211f85cd0b5de32eff0b720c228386462225ae2d8da2dfc1334dce83f3e55d9acc6112c7990ba4c9","ssdeep":"192:rKGSPEXIWFKru8klPCwNULeyZmQg8r3f9hQN7af6ZKjqE9Qr:rKGasgruNlPC6UTHgO96N726Nfr","tlshash":"5712ae06a27a6a52f02de375667dd0c495ed5bf045b8ac1055e6ffbcbcc21dec20c204","first_seen":"2026-03-18T17:47:32.961809Z","last_seen":"2026-03-18T19:14:19.298434Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/giay-phep-hop-phap.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/giay-phep-hop-phap.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"12bca-68a4409d-432f8e;;;\"\r\nlast-modified: Tue, 19 Aug 2025 09:15:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76746\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YAJHNq5CGbfATittmBUJo4TevISS6mmhgMsSX3TkWYobn2wxV6yyRpb%2BJSjSfnSBt7vBXbeGmBddz6nn7sa7Ty%2BOHQfwNfdE%2FChYBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7de8abfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a73a6d47a184c94cda81ff8f9776af44","sha1":"ae84f70f41eb713823743321bc91618413471c1d","sha256":"26ad580e0f00b02326f19b3eedce03c8f878535f2c204c79081ca081119f5c52","sha512":"b4f675d98ccd67bf541dcdf9963c86aae4cf591d45bf17eef28c2069c7d3d43806e888ac9e3300d1f6dff620dc6895bf3eee73112eaff66723ff41d45adcbc56","ssdeep":"1536:D0Mu91eQq76JRoO/9xRJmoLEWBDk41/WG78ZcqeGK3F9AnJ0bac187K:D0vNY6JiECok4YSqeGoFyJ/c1yK","tlshash":"7f73e07c188be2c3e7ea66f2074779f32766f2962d0a5d4094119d130f6f6d19e8ab30","first_seen":"2026-03-18T17:47:32.964851Z","last_seen":"2026-03-18T19:14:19.299183Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"3f6d-66e15ba4-433abc;br\"\r\nlast-modified: Wed, 11 Sep 2024 08:58:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4686\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 4100\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejG5rZeOsKw3QYO9HF0MwDaUOdqvl2LSQXvXGDbx1H08vuFZEy20mUObPnT4IlPxE7jjM%2Bb%2FuRgtjZT%2B1Oe4jDvO9iofp1aMLjFZRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7e28c3fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16237,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13072)","md5":"fe28432f39d383868c62b57694cca31d","sha1":"9a4f0059402dc74350bf6451477903840b9553a5","sha256":"4c1f3df3646c27bf2afe2e6ebe2a6fc0e3d3cc19bbebb265f205efd0e55f9136","sha512":"1c1a796fb8ff64e997684e28b5d4fc2242f0f96b768ade282a70fcf58a6179a8590c825fdec38d15f8783d33fc270142576e283704cd159f0b87cf1e849776c9","ssdeep":"384:Pj1yd4Sk6FCT6IZ9bAstA3fVipSfUeGebT+u:70iSk2RIZ9MsmNq+p","tlshash":"bb72c904b2412272d39b60adc89b450e69bb7a1a3c05289c762ec9c58f74f0c70ffbb5","first_seen":"2023-03-07T16:33:47Z","last_seen":"2026-06-13T16:04:23.952343Z","times_seen":12765,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/themes/flatsome/assets/css/flatsome.css","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome.css HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:43 GMT\r\netag: \"251fc-66e15ba4-4333ce;br\"\r\nlast-modified: Wed, 11 Sep 2024 08:58:12 GMT\r\ncontent-type: text/css\r\ncontent-length: 28022\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 4101\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrUUiF8U%2FjDHDGQ8kQXWSott8suYM%2BqaMWHLuQwIhXjuxPrgTy8WVvbro%2BsTa0rx6IvaWcs5zAvie%2B%2BlhtWoXYwW5eftjfRdmyFvwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7d887afb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152060,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"df78036a530d25d47f4c3cae36a0e62a","sha1":"310d1540d0dc1498fea575af3b914a4c97b622bc","sha256":"18c56efbd596fc0d574d5ae9839c9f48c7eb826024fbcfb960e0036baa9fb32b","sha512":"5b8d1d634074a4b12f8b29aed7acebc7c39d875adf74926fd5ce867bc6055f3d1b110ea4abd956ebfd80f21bb25840d52cd4aafe2230997ff5b6f2159c0b37bf","ssdeep":"3072:Xq5/32yTXYK8Jm1LqCYDmSx9JNp30dOeLWo0EADT+1zeckhNV5h:MSx9JNp30dOeLWo0EADT+1zeckhNV5h","tlshash":"74e32c52f384242ca5178319e5c4fbbc763991a1e7624afbf0639629cbcb6da0135f0d","first_seen":"2024-08-28T18:27:34Z","last_seen":"2026-06-13T11:26:28.286716Z","times_seen":1936,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/km88.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/km88.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"25b6-68aabef9-434eec;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9654\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4101\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0aIt6lrkmHJiUJkDRrTfxAntBp1svvlMmcPeOnMRbQP5xovL5jHbYEuR95lRtORcTDwb5W6TklhJpVMjwtb%2B6iWEzOyeUIQzQeOrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7d988bfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9654,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c57e33b58709f7c9b6b2b728af5028df","sha1":"dc4a5238a8034735d6064eea7b470e73d77c27af","sha256":"05d183a783a18432bc8bb902fdc42f912d4f8c2c78dcbb73577926b965859b12","sha512":"9116197076e169482d2315a44edf6c7cc293a40ea45c79079e0f104fa3cd19776dca077f9d9c4902944a257938fe025cd9129bee768a0a80ab5d6a3705abfda8","ssdeep":"192:wzVnfPaAexMNPqRxw4sMyC5oxNVKD+onent5xDkFt5IC:4naAexMtU0MN5yH2n4tXIHSC","tlshash":"e512af0809674067b2ec729423df49a6c975d458cdb4ed200dfbe63bb67445829bb30b","first_seen":"2026-03-18T17:47:32.980618Z","last_seen":"2026-03-18T19:14:19.295443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/88i.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/88i.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"3322-68aabef5-434e9a;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13090\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FwBwMQhbPyKBKheq4yIO3%2BxQ1q470eoa5TTpv4NZnDHlKRcnO%2B6CBkBMKj006FoTRKO3ZC8Rwo6PS2qC015YIt5oGZ6YofWmDx6mTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7dd8a2fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2e42094f397336592881f3f35784bf12","sha1":"87daad73ab88dc0300f0e537fc005787b896926c","sha256":"c16db92206f88935b307a10015408afd489a6c9cd6a44d05a7ffab9ec3e2eda9","sha512":"f1ea0ac94b3c80eddfdc0978772dffd182c98485c79771e637080064e584ed473f26f858642dc200ee59e1afedbbc7da629a60f6a0945d40b66fd0cd528cb2d0","ssdeep":"192:NiPm3fxPj3IJRukP6jkRU3ulMqlHaQiFlW5U6yx5C5L7hUKsIuOiBvv:NiPm3hj4XukCgR1lMQCrW5VUFv","tlshash":"ee42cfa093973f26343d58e09bb39cd6003223784fe5c9571d19ab2205bb5e1a53b5e4","first_seen":"2026-03-18T17:47:32.983261Z","last_seen":"2026-03-18T19:14:19.308436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.19.6","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.19.6 HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 05:47:05 GMT\r\netag: \"1d88-66e15ba4-4333d2;;;\"\r\nlast-modified: Wed, 11 Sep 2024 08:58:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7560\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9tTxG7phK8NXviSAtKhKRBVHJME8Unf%2FMqOHYH6eWehrctW0elYW7lgVzZZ0auTH9anpjbQ6X9%2FJRL61oEfSh%2BU%2FXh8q15yzX7pOBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7f791ffb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7560,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7560, version 1.0","md5":"7db70d75ed20d444c694d6aad85ce18b","sha1":"01d64f5ed7777e34c148c83595b877d0f6272d4b","sha256":"3c5b7d55b56f4bdee9e362078497694a9605b716868eb907b7e9c39bc5b5b9cc","sha512":"ad05e1701fe81d050b8db6574c28d9ce9c12242fb4cf4d6d4c5746829574ac2b38029cccb255d21c4b0c2d60d73854894c5043245c3ccd733017b60d1ff361a4","ssdeep":"192:mdZdmp7xgnbaRx9fo1JQrUo2Vfah48R+Q/BE99D5q7PKJ4:+ZYpsbaRxphAYhbRD/BE99Ep","tlshash":"faf1afddfd527b7bd2d1d126394007c838cad44919901cc2aaaf2f2933a3c569db27ad","first_seen":"2024-06-20T14:33:16Z","last_seen":"2026-06-13T16:04:23.953424Z","times_seen":20716,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/themes/flatsome-child/style.css","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/themes/flatsome-child/style.css HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:43 GMT\r\netag: \"766c-68b53d7c-433394;br\"\r\nlast-modified: Mon, 01 Sep 2025 06:30:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 5840\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 4101\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04jneUwP7ocEXfCbLNYmtGJ6Hn%2F%2FCGCt2Ko5CiYsHovvWoD2E4LuJBTqIWtREbcRIUML2M7zU49K%2FvOczjqE%2FkY5ePLe1rb7%2BjxQJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7d887dfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":30316,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"cc0e73f245b17383c0608c6729a49914","sha1":"c2d4bc7dd72a650764c52f662eccd0b0e4e4dc1a","sha256":"81d73308a83d124c0a732b5722d70cbb6ca377e6de84bb82a312ff301f85b740","sha512":"e5c62dd6ab5056e14492da6ddb96c6fae2b7ce88b527714c6ca18afa8ec870743e989e3e2759ddc0df25f3d0cc8c90bb003c46b333cd41e23aebb3759f6ab364","ssdeep":"768:TXMYIRIChFvKPKWfFBFlAFjYBFvFDV7TZm8gC9PIiOrXmFEFGdqFV:TXMYIRNQyWff4pYB1RVZMiYXmCIdqb","tlshash":"f1d28496d5a3180db41795586fbbab56232c9043e10fcdbdbfdd32488f852e490b2b8c","first_seen":"2026-03-18T17:47:32.985929Z","last_seen":"2026-03-18T19:14:19.296931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-includes/js/jquery/jquery.min.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"15601-64ec7380-434656;br\"\r\nlast-modified: Mon, 28 Aug 2023 10:14:24 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29597\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 4101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHqh8N%2ByeShlAID7h99JbvNt36eOHlbz9oMFjRvB4dHPypdO4TFC2SMWucbAZDtfD9Dp%2FmwGnS669CeHEl8iBUkOoXBpv4C4MoPLpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7d8882fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-13T17:33:36.774813Z","times_seen":904814,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 05:47:05 GMT\r\netag: \"9444-68bd79bc-427c;;;\"\r\nlast-modified: Sun, 07 Sep 2025 12:25:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 37956\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HNlBixtfBD2sfaaxFIPvpFPLohzSAY1V1%2BsOfGX1G%2BAFSmFNX68lURf0C6p4Nze04Aer%2FKWMkINkyQl%2BrHYXiwi9VT2BVHaljdmy0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7f7920fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":37956,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37956, version 1.0","md5":"311d352d93230ece04b34eaa8ad10d08","sha1":"a5ec54920b589ebe2af3bc3bb7754a476db68abf","sha256":"06b16db7a969135d48d38c49183be7fb88d4452e2a3011957c7851941f4e4879","sha512":"c6958d434bd827914bdd132b294209f48d84c4f91aa09ac6476fcaf9ab1cb5e70da6721c9ae2cfe350fa8288fab2ac10208e4a7d2c385a746768048bac0a631a","ssdeep":"768:J1K3v4RM1yf6cH/Ca4EOAFVnQZ1haUKUKAJmosEc6wcTwL/bjf:m3gq1yf6XOQZP1GEcaTwjbT","tlshash":"1b03f1b385431ca543842f3397cf967cc978fa55ab843b885823eccc14aa6adcdc0764","first_seen":"2025-09-07T23:16:26.412091Z","last_seen":"2026-06-13T16:36:30.019819Z","times_seen":32009,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/cropped-LOGO-NHA-CAI-UT-512-192x192.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:06.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-LOGO-NHA-CAI-UT-512-192x192.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 05:47:06 GMT\r\netag: \"178c-68998b5b-434ef7;;;\"\r\nlast-modified: Mon, 11 Aug 2025 06:19:07 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6028\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGxWalNOCJHRm%2BQ%2Bt%2B8gOnyAMBKunobKhn1ibDtQ7gD5zXBhL5CYSOCQzCIM2okp73cl79WMTmC5qw%2BPOglkGOGIcfF0seLIrf4Jig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f853b74fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"69bcb86837d267e795ec88b2516c988a","sha1":"4ace1fb9a9236ee19e850497f1b2e2662da66cd4","sha256":"d049107cf122a2f3060eebe7ffb5ee2077f03aa65b22291e737189806e7a707c","sha512":"fd969060bf0493d0edde22f119288db16418c92ad62cc6faaeedb85f1c0e762b11d1af28f89aa53e2fa00db0f7174df749d9c592471cbc19165d20f6b65a3d72","ssdeep":"96:rpxUV357zfIdySyzhR5UiqzJUi7Jhq+1cSwIa0Irr0QE5hy:rUV3ZzwuzNaJbJs+q5IfIrr0QEXy","tlshash":"20c19f5dc1676eb2f15cee23233bb022ed4775390e719249c064a6380bc0537ed67c50","first_seen":"2026-03-18T17:47:32.988232Z","last_seen":"2026-03-18T19:14:19.306796Z","times_seen":2,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/themes/flatsome/assets/js/flatsome.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"ce7b-66e15ba4-4333a2;br\"\r\nlast-modified: Wed, 11 Sep 2024 08:58:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 15900\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 4100\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8KMVtHrs0d7QI4siL0RF4cqOhqjDszzhT98WkpjxCm2kYXcvOjtb6xzFSmyoTNgJseBw3pY6KNAkM0GjM%2BhYUocZ8aJqlcahl0upBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7e38ccfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52859,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52859), with no line terminators","md5":"e4255cbc3ddf1c27dacbd4860b3782c3","sha1":"fa17cf43be7ad4814efc774f8f9d8a6a9a5c8221","sha256":"10d17b852c0a0ab3de4638a2b0fcaee7ed4632a04fb126d388e871bffd0d0854","sha512":"e1dd1119f545c4c2ff24eb34ea1c0ec902abfab92b35abfe75a382ab7af5c065b88ad021b7a0d57ca31a839588e1fa4d485bfd3c59011c34d0057ac94b66cfbb","ssdeep":"1536:IfDJqH5NQ8kNSqcp1U8EtmoYrNqK7kSBed3ZRm:MoxjUvkesedy","tlshash":"1133e728729070fd01ff61a7f13fa32432376565b0064054b53d98fa2d6ad5e26a3fba","first_seen":"2024-07-13T11:25:57Z","last_seen":"2026-06-13T11:26:28.236815Z","times_seen":4683,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f525.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f525.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 May 2025 14:09:54 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":822,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67069a13e006345ce28ecc581f2ed162","sha1":"fc3cdd9222c027f1b41f9b3d872a31f263e8d6f2","sha256":"4fa646a4dbc10513ddeb70561789483638faf456e15186f4eb7291c5c455cbb6","sha512":"427f004706c01936da9f3f91a08f4a9b562caf4a16c19b8b5998903645b5f8588b10bd0aa7c77fa5fb42b493925bc1971f8b6820adc845ca6a8fb16c589855da","ssdeep":"","tlshash":"7d0146e93234b648c65a7e7e9f6cacc40b48b0ba19a08da940e39c4438479e93368c00","first_seen":"2023-04-05T07:11:27Z","last_seen":"2026-06-13T14:27:35.646156Z","times_seen":6633,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":42,"dns":12,"connect":7,"send":0,"wait":13,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/tk88.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/tk88.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:43 GMT\r\netag: \"5abe-68aabefc-436f11;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23230\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4101\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BwMY6G9sT0oygFyhl9TXH7NXKNsTqb7NrtzY6yqYuEUzs8%2FrKDm%2BPrdIdvKfpyM7seEoIulzRJuE0L6TB6mAg2%2F3pS%2FySwYf%2BOWZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7d9887fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":23230,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c23843df41165f37beec8cd0c65c66c7","sha1":"6260d20352082f37ab209eac43697c66d20bf8b1","sha256":"4b8fedaf1efd56a1db1dd8ba32a7e2164dc0a82d83517de4f0d13fadb9629f54","sha512":"420a517bc93c4c4ce99b58adfcc312094688f2f5e11de371fb0ff61914b4b843888c8fe96d280281a0e501e660edcf60a1f8d06b84fb1be414933d26a46a1ccc","ssdeep":"384:jztLt+lR7RIBc2fV4ZoRjmHnFp472ehLoCOJDZQcrE6H0Fylrx5rTg+EAT/xerro:jzOlXmrV4eMlp4S8LiYcrE80FYxZTh/f","tlshash":"e5a2d0f3880d05055879c918296ffff1a4754e4af28e642a217fa473ab54fb291af009","first_seen":"2026-03-18T17:47:33.003877Z","last_seen":"2026-03-18T19:14:19.317115Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/qq88.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/qq88.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"1f14-68aabefb-434ef1;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7956\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wtgApBWxahYimIiNbf5v1m0Qpsaxp1U7Oph7ucNfvtVrM%2BX8U00n6QvOPQY2qt3fzWCLMltiF5QjLExx2SCpBa%2BOf%2BeL1SpJu7qdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7dc897fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5212a28fe176e13d16dfcd0adcf4aed","sha1":"954c7c25b0f771ccff02d42fc7ca143d6e7b58eb","sha256":"dd549dfea51c81adc4e126d1b0dac46f5299beecd8b8bce850d8ae28a3882bbe","sha512":"d1560b6240046ac8fb2b7be49e823362b59629b7d98e59780243f38c1aa6d494bf6739c6af0d07a418ca50a88bb3aa086292311459bc0e00ec90475f1e4358c2","ssdeep":"96:sMk/N+0ItMBmY8lsnP+2vt2aS3TSoT3iTotHm91jwAULgAUdFSeD1FrlI8ET7biZ:szVn/1ksP+2Uf3TSoyQhp5ylJguxL290","tlshash":"44f19ea876321550a05c32c013cf9b96e5fec9236071a2850c92bf4efb62f1ec67324d","first_seen":"2026-03-18T17:47:33.00716Z","last_seen":"2026-03-18T19:14:19.301111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/vsbet.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/vsbet.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"1a38-68aabef1-433219;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6712\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5fZ1%2BiDuiGtjM%2Fu6mfNQAh9b8MjAmcSkB6VlLAf%2B8zmCmkwSN%2FZV05uk01LB%2F1imaF8zoHMP2A1KZ51qIhkmxDlBga8E0%2BiCuYXGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7dc898fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"556b96ac51e57e93076a8081d090f3ec","sha1":"fe8952879c00d18d43524b3626586ace6f1f4aab","sha256":"8027f7e197a1c2adb7ed32a84bd206a21fa218cbd308ef7d413d7eacc9c00ebe","sha512":"cdb1050b5b6fabf82eed27e91778d6d5a842c67451283d231c90e046eb481d106dafbe887199b1d21905b4617b4bc71f5e21f77a045d32e732a0fc9b8ce471f3","ssdeep":"96:vcw8K3Gh4pc9PPgK58V91NhWZprzuDMM1zWER/SnpP3pWkRFuMLAuYvxeEnjMea:vTX3iPd58f1byCH1KW/SloQSlUEn8","tlshash":"47d18e554763892ec4bfb1b5533baf44f056cc9003adbe1473b4da02e10b5718296e6b","first_seen":"2026-03-18T17:47:33.009916Z","last_seen":"2026-03-18T19:14:19.307445Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/88clb.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/88clb.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:46 GMT\r\netag: \"3f36-68aabef3-433220;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16182\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4098\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlLNOyDRrqby7L4%2BYa3v0KNZ%2FBUKbHIyU3bFUEsX6yUcuk5X5qrlNsGNOSsojpd7K3UMx%2BRYE3Lo%2FxHPPuTA1t2m3G6UAriJJ9aFMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7dd8a7fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b2664c0cebd691398f657b3115264947","sha1":"a1a1d443ee98f55262d594849a2fbb1ff3dc136e","sha256":"23686eda29a7b1e3b545763bdc15229213e625188039971fcd4ca6fc4bd5df0a","sha512":"07c6346ea674fb9c7c02b678ea0a2aa099f298621e287ebd3ea7d5d45d2fdb28b07463e43f536dd0eb7ce59af5b4b34c546bbec5f7e037c7dc64c02189850bb7","ssdeep":"192:2rXL4XemPgXdovuTUNlmR6uZv7/N3OrGBMxOQpUeEZt8XSm+7AYncPYVrCG0mjWI:2kf02vwSUbvMSMpU5iw7/R9C1KWuate1","tlshash":"3272cffa0c5477703694c8f41434e468b2fd8f53b47ece06f5acd043979e1aa49a62e8","first_seen":"2026-03-18T17:47:33.011241Z","last_seen":"2026-03-18T19:14:19.317684Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.19.6","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:06.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.19.6 HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"c2f8-66e15ba4-4333b8;br\"\r\nlast-modified: Wed, 11 Sep 2024 08:58:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 12877\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4102\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4EELpz98O08Sqcp3prbTPyR1EdXvdhMPSksA7UMgb6Gpi8kmXXXNUy%2BpGolNkRVNoUBRe7T1hWESR0qICKJLaseBt0QQMtuRBbFEDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f86ebf3fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49912,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (49912), with no line terminators","md5":"a9820dd1581c176d3ed694c27c17c90a","sha1":"0ff123fbfccede0a2e35a0e96a7fd9d6407bfd91","sha256":"c1abb1c5dfd238fe28fdfd930789c1ced9b5fe35d4d05a1e48b23280afe64e71","sha512":"f47fb6c97d71f5b67d771a39ab68845a320dca6a94047a4da252b8cd4ec72707df60cb411e7c43a6b7dde516d212146ac93879b687095ec110fe94bd75f964dc","ssdeep":"1536:Z/0mlwxaL/hxVzKXUlTAvw3J12/tqD18+AcJQVlxdz9+rdK0:Wmlz3JZt6w","tlshash":"a923635eb2413a3941cff1a7622f464ea273206d140181acf8a9ecd65db9c8d743bf79","first_seen":"2024-06-20T14:33:15Z","last_seen":"2026-06-13T12:00:25.703769Z","times_seen":17929,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/LOGO-NHA-CAI-UT-270x80-1.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/LOGO-NHA-CAI-UT-270x80-1.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:43 GMT\r\netag: \"c64-68998b42-434eeb;;;\"\r\nlast-modified: Mon, 11 Aug 2025 06:18:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3172\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4101\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FnHbC4j51DUlOHEYZ%2BMHE85id6%2F4F8FLyBO7a2JJyxbdlejnfNkhGYUMEEhB2WjRVmIg5G%2FvdTXzB5jvUv2CSqKm%2FsybRoP%2Bd605Yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7d9888fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3172,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b9c5a5f71929c2484f4074cd63b69294","sha1":"25115f3ce6f07e7f55b9611e8f5f68575d92cc54","sha256":"c81fbd5ae2a6da6f1fe3ce1568c05d2edac43f8824534f7eb3857707a3b8259f","sha512":"b893194a88a019be3c044281c72fc4b662d368ebd46bc2659b9b383c5c5887d5369651ea4233c65b1080aa37d7c94b9540ac588f7fae7e1fea48fc4a8d1a10e5","ssdeep":"","tlshash":"f5617ca5de04923cf3c02027c776908261e12ecd2d837c32228eed0a8b90c6eac06349","first_seen":"2026-03-18T17:47:33.013012Z","last_seen":"2026-03-18T19:14:19.294787Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/plugins/foxtool/link/instantpage.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/plugins/foxtool/link/instantpage.js HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"b3b-6895cec5-4343c8;br\"\r\nlast-modified: Fri, 08 Aug 2025 10:17:41 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1053\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ydXGIgdMR5K4NWvwqlxF2qr9sKqgE48pE5JdkmDjnIARJpHyJ1y5E4Z%2BJql9J%2FtE21f%2BZoEDmRe4iraW%2FsKkDu5eHZD%2Fetmu6dqxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7e28bffb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2875,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2783)","md5":"d3041001cb5a94c9f30dd5d8d33802ac","sha1":"1a00966fe7fe4a056db276d4ecf1d4372d28659a","sha256":"0d0ee7a16ae3c3063d7644963128afd917c75e9aab66dc4582966b6e5aaeaf6c","sha512":"5c778ee619bb9879505b1908b317217f448be6d7e599df66913f99d1039170905b36c2355a27276afc4f7cae19b55739777b040414d6472c7f21ec99148dd261","ssdeep":"","tlshash":"dc5122d9e20121fa01f656b262bba340b53a11443017a0221c3e9dd95e7ffda61a3e9f","first_seen":"2023-03-07T13:09:28Z","last_seen":"2026-06-12T10:07:41.003705Z","times_seen":668,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/bg.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/bg.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"1fecc-689acbca-fa9;;;\"\r\nlast-modified: Tue, 12 Aug 2025 05:06:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 130764\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8UPMPbwd8PudSwKAXpvlM5PoVUCF9iXl7c2JMcDSLkR9Muqg8MJev4t1AQ1ya7UUUBobl1v1Hw3fO6EthITZbM8p3nsBtk6yRR484A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7f5915fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":130764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b884a15f2a99945e04f97b55709fb91a","sha1":"6299fbb3b8ccdd847bac67f6a01f5c86a56510eb","sha256":"e2aecd99dbd19086f475820c2bf1b47656cd36f5ebec944a6936d10d188199ff","sha512":"4e6a695835eb2bd4e394c6c5579b757c839a512d8f6322a92332a457484c18d44da4e8843665a1fc326a7aeac2f21d072d1e361c17bfc37ceba8d92ec03a8c92","ssdeep":"3072:3VZ8RbwWjzhXk6X7TtoKGQ5gOi08PwXYHVlIB7Rk:7ENhXTfGUWP7Ps7Rk","tlshash":"7dd31215233f8b9fc65c41fb5a1a361cddc533cec2039c569a160fa5fb8b9343229a89","first_seen":"2025-10-30T10:07:17.071638Z","last_seen":"2026-06-12T10:27:09.597273Z","times_seen":7,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/themes/flatsome/assets/js/chunk.popups.js?ver=3.19.6","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:06.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.popups.js?ver=3.19.6 HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"4e48-66e15ba4-4333ae;br\"\r\nlast-modified: Wed, 11 Sep 2024 08:58:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6929\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kr03W805v3WYDO8hPnno%2BC8HHToyQK3FSXa6wRwjLdOdmoSM%2Bjh0mpnztaDKTAXdwnR0%2F4HQo54nuE0i4BzxbNUWkufY8c2T3hE5%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f86ebf4fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20040,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20040), with no line terminators","md5":"58d197438cf1732de099a835eee1f203","sha1":"ba831d6df4962eea0b97ebfc83a03c2413228bd9","sha256":"da39613cd3084e98f35de15dffc1cbe886d429870c10df549308a23174717be3","sha512":"7e9a87932047a2f22649806584a1f37a5d4682581ac2ee9a1be5b6e3d98ace7d7dc2e75bddf54e952ade22c21dd4a016be9f0a9e843808f14be6a2e57a0cd0ea","ssdeep":"384:CP9kCoixNXe/bDhRSkvRuAoCIKJe5anL/L3LnlqV+g+JdSPR5c3GJxQc:ClNkhH0KA5anLPlqH+aPw3QGc","tlshash":"f592e858f1a2b21783eb75b86d9f240c3b72e512c94bc001765994a86dfde88a127f3c","first_seen":"2024-06-29T16:20:38Z","last_seen":"2026-06-07T07:16:31.687208Z","times_seen":13081,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/09/gotop-1.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/gotop-1.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"37c-68b53b56-436f0b;;;\"\r\nlast-modified: Mon, 01 Sep 2025 06:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 892\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48aOzfN5oGMygyirABvgvuG46Ph7R12zcwwEBEJzC2LXYbJfhjIHyKkQr7ik7FMkT0ZbKWc16Z4uq3dxpnPGenmEcNGvTtakxVL6hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7e18bafb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b0c9a98ad367ea4d4e16f40caa0919f7","sha1":"8418c11c2f6163373f054c1e75f72321a98c68f6","sha256":"86ceded8622029fd0880e37baa0f3ca79619f4406a09e4155fb7d5c8a8670824","sha512":"a09f85318d376fa7da68970f5473a962031cbe362bc9fbc838402a3c577b1a04fff2d871bf8fb5e75b3175e4052b459cf5218805f4070599e35a33142c72c980","ssdeep":"","tlshash":"a211965d47b985c6bd4f45f787dd7cb0e84d0cb4e5a079023071c832c898a4a997c6b8","first_seen":"2026-03-18T17:47:33.021612Z","last_seen":"2026-03-18T19:14:19.300442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/plugins/foxtool/font/webfonts/fa-solid-900.woff2","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/plugins/foxtool/font/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/wp-content/plugins/foxtool/font/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 05:47:05 GMT\r\netag: \"262f0-6895cec5-4341f0;;;\"\r\nlast-modified: Fri, 08 Aug 2025 10:17:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 156400\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2B30%2Ffv4uQtFOIVwFNz4Yg10uvbz24WysVgLAW7aBmhfJyUWC6HCTu2sYHn95MGLl83rdDSAY2O7ccjZ0nSKvI2mP8gOXM4dF90d8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7fb943fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":156400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156400, version 773.1280","md5":"1ec0ba058c021acf7feaa18081445d63","sha1":"73e7eabf7a8ae9be149a85d196c9f3f26622925b","sha256":"ae17c16afbea216707b2203ea1cf9bdb45b9bfe47d0f4ae3258ddbc6294dd02f","sha512":"16a1b8a067ad4a33dcf4483c8370ca42e32f1385e3c4e717f8d0ce9995ca1f8397b15a63c0cee044c4b0fca96c4b648c850f483eeb1188a20f8b6cbf11d2b208","ssdeep":"3072:T0NNdf7uJ/Q8zfLtuI3m4uTtijwbr+mV+5ZUTRjV:AN7r8jMbgjwvOrU3","tlshash":"b6e3139a9a1f63d89c3cd982f61ef3fb715aadab1f521220193149f9d04f0af5035a4c","first_seen":"2024-04-05T18:44:58Z","last_seen":"2026-06-13T15:11:28.911442Z","times_seen":12224,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":553,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/plugins/foxtool/font/css/all.css","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/plugins/foxtool/font/css/all.css HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:43 GMT\r\netag: \"7d3b3-6895cec5-4341e9;br\"\r\nlast-modified: Fri, 08 Aug 2025 10:17:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 93560\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 4101\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4feoRHoa5fuKrYLYOowC2dJWIGah52SM1cag%2Fs51HNs%2BgmJsW%2Bni8XxTn8up88dM02htiIyFeosYAaAXlyMpSbB62yTMF9mbxqJbrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7d7878fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":512947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52217)","md5":"db994fc5fc24674a03e74b631f0ce743","sha1":"4c4fe555787ec71105836d806ce350d83ceb3a15","sha256":"8451a10e6ff316948febff2bfa99d37eb0ffc8a2c6d3be0b4591c5c8f1a6b0ca","sha512":"9db1fb90f97cadd936e6689e990c9f4d89df947ead60eea0a1cae48b69d3af1c4af7faacdc50b522cf9ef181a7dd1ea5ed2214dae9ea561e0b44c71b169c6f71","ssdeep":"3072:t2bNzUcZmZd1FHU2kbVxYgjpjlC6FJoKjH1oB/Ry/0S68xbFxDQjJ:QbNz1kZd1FHUzdRtJBjHyB/RE6K6J","tlshash":"b5b4e9a0a05520dcb3d7e60f5b02b629e4b3f33ed9814f5fe1d5484e0dd3a6871867aa","first_seen":"2024-08-20T00:58:06.817842Z","last_seen":"2026-06-12T10:07:40.976797Z","times_seen":54,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/themes/flatsome/assets/js/flatsome.js?ver=8e60d746741250b4dd4e","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:06.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=8e60d746741250b4dd4e HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"ce7b-66e15ba4-4333a2;br\"\r\nlast-modified: Wed, 11 Sep 2024 08:58:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 15900\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 17:47:06 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4102\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eATaYLHmPg82KsoT9zULUqWTnO4IpAWADIXTzksQGLTm%2FOR4yefeFO1wAO0Cuv2oXWbII0ggBd1%2Bv3EdBTiFVjEFHLpTBhFWq5E%2FJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f86ebf1fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":52859,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52859), with no line terminators","md5":"e4255cbc3ddf1c27dacbd4860b3782c3","sha1":"fa17cf43be7ad4814efc774f8f9d8a6a9a5c8221","sha256":"10d17b852c0a0ab3de4638a2b0fcaee7ed4632a04fb126d388e871bffd0d0854","sha512":"e1dd1119f545c4c2ff24eb34ea1c0ec902abfab92b35abfe75a382ab7af5c065b88ad021b7a0d57ca31a839588e1fa4d485bfd3c59011c34d0057ac94b66cfbb","ssdeep":"1536:IfDJqH5NQ8kNSqcp1U8EtmoYrNqK7kSBed3ZRm:MoxjUvkesedy","tlshash":"1133e728729070fd01ff61a7f13fa32432376565b0064054b53d98fa2d6ad5e26a3fba","first_seen":"2024-07-13T11:25:57Z","last_seen":"2026-06-13T11:26:28.236815Z","times_seen":4683,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/bet88.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/bet88.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"43f4-68aabef7-434ee6;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17396\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jAuOLAj4MWQ4K7f%2BFRF6tP2GCehFs8imeAGTthGDRBSXuUIkqB6HxTKBO8LvZCX4CFcUY%2FMXmj3Rw0r6COQIEpEIMb1POkPOZ6FKHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7da88cfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"801d666a3cf71c9c60c2cf62a13a500e","sha1":"010bdf12ce60d4a357877876927b0dc157bc629c","sha256":"2edd8fb6c6176b01808f8f1cadead65ab73714b20afb0480db42e6c5cbea9b4f","sha512":"dddab84202d48dbc0e5a286c842355021072ccd9f4810c5dc1d5bd9b8c752959647400237efb413ea33353ae7445d79eb829bd609bc5384535885034c8492069","ssdeep":"384:Qwd26pEgEU3FmnZgj2N6YZ0RBVbvnwD2AD9iZhe:QE24EgE4Fmn+iQRBVjq2QiPe","tlshash":"0072d13598e289153a125d287fbb1328d722de34580df2999b64ec53ff1c4520fbb388","first_seen":"2026-03-18T17:47:33.025967Z","last_seen":"2026-03-18T19:14:19.304556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/MU88.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/MU88.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"4a2c-68aabefa-434eef;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18988\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V40oLz%2F%2BAGWFd0xif90NEXr0r2yGMD7Dnr%2FYBTofaa9AF1qaKLhReA1AJ9kEAzwYtXqo43LxL16dHzordbFpqM0KEsSwLW5gdlO9VQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7dd8a6fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18988,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"861f34f5df7d3323a055c0ae6ab11d0d","sha1":"d1de4225f6c7ee729c2c2f0446a6b43589a564e9","sha256":"2c434a7089b5b683d338a3b7b169119a34af22552f96866e2d953e5b51564c42","sha512":"9a694a794f766c71a055899306577e1ecacb3e622beef269b241b24499ae61bf1e71b0173bdb5bde9cdb027e2e2d9852158e25edc4f4fa767894d166e3d15c9f","ssdeep":"384:UKGasG3igf2SRyvI33HshEFCkyLc5jxuNZUeuMJnXjR9T/kO:wRBgf2SRyA33ivkyLc5UNZUeuonXjRJ7","tlshash":"5c82d01984dbbf2bd66ed66aa23c7c16c0e6e8fe4209795340d61fa6d7014f0e1be017","first_seen":"2026-03-18T17:47:33.028526Z","last_seen":"2026-03-18T19:14:19.30515Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 18 Mar 2026 18:35:05 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LhpRwpb0RW677eznqdSqGqR5yLp6xQ3cDVVhA6rgUW1ntPDEe9GH1ywoYXMCsi8g3aDpEF8WcJ3MWFWyEWG0t%2BUt3N8hcx6uygyiVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\ncf-ray: 9de60f7e28befb58-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T17:33:46.023529Z","times_seen":368207,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2 HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 05:47:05 GMT\r\netag: \"11420-68bd79bb-1a2f;;;\"\r\nlast-modified: Sun, 07 Sep 2025 12:25:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 70688\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VkYe0t5ncBv7JBBXjsL2OTtFi8LveQPtO8%2BN0gNkAeVp%2Fbz6QfHsYDOvjQfeQXhunxHiThP7Pu80PWJUA7B38UWXOEDgDdr3IgteA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7fb93ffb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":70688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70688, version 1.0","md5":"d16dfe26bcd760a6382f71b7e2041ada","sha1":"a63797c1e1c137082b7a58f6ee58ccb8640ac51e","sha256":"54d9a78b7ff60b689ad9f3017ffac8547b5d871afec733f6c1c3ae36577ee504","sha512":"fda0b27187940d82d30b71bfd6b2bc6ee05949899efe6537fd0d5b415da5f3c47a5da13404efe815caf0603eb10764df9d502d6cde054fcdfd59b8793a812a03","ssdeep":"1536:WBT4W49rSUvMiCLelvLZj7uojKZDBPbxCvlzTFvi6n+LoMHM:WBT4kUfCClvrYDBEtvFv5nhH","tlshash":"a96302cd1ba667ed0da61771c8269b40358c7c4b7f2508a65dba68f653827d14cec50c","first_seen":"2025-09-12T13:44:07.974577Z","last_seen":"2026-06-13T10:00:33.824731Z","times_seen":1645,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":378,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/sodo66.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/sodo66.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:44 GMT\r\netag: \"5ff6-68aabefc-436f10;;;\"\r\nlast-modified: Sun, 24 Aug 2025 07:27:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24566\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uksY%2BC9RuZhn78aOcgAbxpXcSVIVKM%2BTI4BskChlhRZpE%2Ft6ut%2BxiR%2F8%2FXhCM69KvE9x6ZXxpCV6gVSXKj2qUD1TeSd9DwKtJxIPdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7dd8a0fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":24566,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee83b10a826443cac1b5f0035ff4ee29","sha1":"2494df2927cb46fcf71b6bc4a02d498d27445995","sha256":"1a87ad7ec4e1d701188d46ca7c0cfcb8990393f0fd01fd28c99ed50090fdc1bd","sha512":"c828f156d92ff1de6b60a60c5518ac776c3b16c0f7a8086287d29301525f5ac4b098dfa7a0c9d16f5dce99eab37ffab35079de3738715e9312c92a76a6b2fa91","ssdeep":"384:uYraY3FgmPr/mr5RkFpnJk22paifNmISFFNcaatTliiC+8OiaD4SobOQj1O5EPFZ:ZrjS46r5RWJD24ISFn9UlMOdlobBj45Q","tlshash":"7db2e1181a718539fcba34f910c2bb514781a26bec3f7924d5f416f938172123edda97","first_seen":"2026-03-18T17:47:33.03022Z","last_seen":"2026-03-18T19:14:19.292085Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/uploads/2025/08/LOGO-NHA-CAI-UT-512.webp","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/LOGO-NHA-CAI-UT-512.webp HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 04:38:43 GMT\r\netag: \"2e78-68998b58-434ef4;;;\"\r\nlast-modified: Mon, 11 Aug 2025 06:19:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11896\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 4101\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95QrQhiBU2ynu4lxZBq7G%2BKE%2FiEQuvKuaOQhNy7wlUClAI2KBJ0WSX1Jwvw9EcDxJARbR0EJVoXfu4jj4KXAPTOK5GKSWs0sCH%2BnWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7dd8a8fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11896,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"37af14780d15a529c9107e789d26021c","sha1":"2b7ab35fb33b2ae9626f0231ae17bab0eafe6a82","sha256":"4814813834dd75287e5dc71061c41fe9d87efc14b27713078fff55d04ea9edb1","sha512":"0c8c0636af227575d7f48cb5661c911ec55c1a87a48c64bc553607a7e5f13c8c0d2b3c41fd2548f8e26b724d8b61d7cfe4401b8df976e7c1c2a478820d2f7ed3","ssdeep":"192:xucoNKPn9e76v8rxQR8M4K0b2aLx9dEiA2EGn2hwsti6DZJ3WeShs+NSGAGPu5Dv:xueo76U1QR8M4KsZxI2EGnn2zspu5DGO","tlshash":"ee32af8c2e80a554aa19b73605646ffbd992aec7a0109c569ce2f15cf6d4335b011f33","first_seen":"2026-03-18T17:47:33.031661Z","last_seen":"2026-03-18T19:14:19.31402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhacaiut.com/wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"nhacaiut.com","domain":"nhacaiut.com","tld":"com"},"ip":{"addr":"172.67.193.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nhacaiut.com/","date":"2026-03-18T17:47:05.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nhacaiut.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 23:34:50 GMT","end":"Tue, 05 May 2026 00:33:35 GMT"},"fingerprint":{"sha1":"55:99:C8:29:45:A6:D0:E2:8F:B6:96:96:2E:6B:2F:13:5D:12:AB:DE","sha256":"8B:46:23:AC:6E:6E:49:94:F7:C8:E8:8E:DA:F3:F6:EF:57:50:67:D1:33:AA:32:21:6E:CB:34:81:EB:53:5E:7C"}}},"request":{"raw":"GET /wp-content/fonts/montserrat/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: nhacaiut.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhacaiut.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Mar 2026 05:47:05 GMT\r\netag: \"9444-68bd79bc-427c;;;\"\r\nlast-modified: Sun, 07 Sep 2025 12:25:32 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 37956\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 17:47:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mGaiotvu7eR%2FjCwY6gEW974La6KQEUfLWiyvGEZWSX2fvtBhlwBEPXFWN9vEQGG5OnqE7wuM0twxSahwycLIZrbaQReMiE5xTnE5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de60f7f8929fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37956,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37956, version 1.0","md5":"311d352d93230ece04b34eaa8ad10d08","sha1":"a5ec54920b589ebe2af3bc3bb7754a476db68abf","sha256":"06b16db7a969135d48d38c49183be7fb88d4452e2a3011957c7851941f4e4879","sha512":"c6958d434bd827914bdd132b294209f48d84c4f91aa09ac6476fcaf9ab1cb5e70da6721c9ae2cfe350fa8288fab2ac10208e4a7d2c385a746768048bac0a631a","ssdeep":"768:J1K3v4RM1yf6cH/Ca4EOAFVnQZ1haUKUKAJmosEc6wcTwL/bjf:m3gq1yf6XOQZP1GEcaTwjbT","tlshash":"1b03f1b385431ca543842f3397cf967cc978fa55ab843b885823eccc14aa6adcdc0764","first_seen":"2025-09-07T23:16:26.412091Z","last_seen":"2026-06-13T16:36:30.019819Z","times_seen":32009,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}